ec5531b6d9576957e20a6464fcd1df0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec5531b6d9576957e20a6464fcd1df0f_JaffaCakes118
Size

56KB
MD5

ec5531b6d9576957e20a6464fcd1df0f
SHA1

25491174c544d054247c50b8a4dd5769a76b6a9b
SHA256

dfbf8380fc7e5696e6e0854acf1e8e45b0a34be410fdd8e949aaf21ca211c41f
SHA512

292eb90923fdb724ebf594e85f58194fa78908dcd95d13db078a8121021a5e9fe5b80a0c4208e2cf72a2f0db33dee8f511c58c20e6fa42a663a293a528e9d392
SSDEEP

1536:wcUNd3NXvXtkbg1x6rdiz0knEkoz307ZpsI8L+hzBZ:GtkbI6rMpnA+ZpsIXhzBZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec5531b6d9576957e20a6464fcd1df0f_JaffaCakes118

Files

ec5531b6d9576957e20a6464fcd1df0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a26a38d8226f828b50cd89037a54fe95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetFullPathNameA
GetLastError
CloseHandle
lstrlenW
IsBadReadPtr
FindClose
GlobalLock
CreateFileA
LocalUnlock
GetConsoleCP
HeapCreate
LoadLibraryExA
LocalFree
FreeEnvironmentStringsA
GetModuleHandleA
IsDebuggerPresent
CreateEventA
CreateFileMappingA
GetStdHandle

user32

GetDC
EndDialog
CheckMenuItem
GetDlgItemTextA
ScrollWindow
RedrawWindow
IsWindow
DispatchMessageA
PostMessageA
GetMessageA
SetFocus
GetIconInfo
GetDlgItem
DrawIconEx

uxtheme

GetThemeMetric
GetThemeColor
EnableTheming
DrawThemeIcon
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ