577403df6939e2e67c052b51d18391de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

577403df6939e2e67c052b51d18391de_JaffaCakes118
Size

814KB
MD5

577403df6939e2e67c052b51d18391de
SHA1

3a6659492f70650e6ab6a683077beede88dec9b2
SHA256

fae4c6c778732299b93b9c73538910f4faadef77e43c088d1953ee046a9c69c0
SHA512

1911c4f5cb3f955128b6c63f7b3d3dceeb7933702a7a689d0c3d100101a53aae4414ffbe633d336c69941e014281db0ea52b81af68cd9be4e6bf885672b8a32c
SSDEEP

24576:eLabei0XGgW+EeJgcJ8Xav9aiYbj+s0C3ivxIH5SqJgH:xbePXlT2c9osCTH5tI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
577403df6939e2e67c052b51d18391de_JaffaCakes118

Files

577403df6939e2e67c052b51d18391de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e02874fdfe6046effef1c74f745e31c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CloseHandle
CreateFileA
ReleaseMutex
LoadLibraryExW
FindAtomA
ExitThread
SetLastError
CreateMutexA
GetModuleHandleA
FindClose
GetCurrentThreadId
GetACP
SetConsoleCursorInfo
GlobalUnlock
GetEnvironmentVariableA
GlobalFree
PulseEvent
TlsGetValue
HeapCreate

user32

DrawEdge
GetIconInfo
CheckRadioButton
IsWindow
CallWindowProcA
DrawMenuBar
GetDlgItem
FillRect
DefWindowProcW
CopyRect
GetFocus
DispatchMessageA
GetDC

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncBool

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ