00313e588a516122089f2ed782094c93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00313e588a516122089f2ed782094c93_JaffaCakes118
Size

56KB
MD5

00313e588a516122089f2ed782094c93
SHA1

29e62cdccf557c1616dd819583704ee1019a7cbc
SHA256

b6847f00e834de07ec00fcd71b6e8b973d2262804c06f5431a494eb374fc88d0
SHA512

8498f5807a3ded9b26a41d557ebd9f78fb80e5dadeb92061c996baf3f9669ace808422f797b967e622d01f82565bc1f4f9a8ae872d9bc9dfea25d1e42007b068
SSDEEP

1536:WhaNd3NXvXtk5lrqm7rlg+xetbC42nGB+ut5:ntk5lrx7Wyetf2nat5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00313e588a516122089f2ed782094c93_JaffaCakes118

Files

00313e588a516122089f2ed782094c93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d035b58cbb1eb62afc940bc95d37dc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetLastError
CreateFileA
CreateEventA
GetConsoleCP
GlobalLock
IsBadReadPtr
IsDebuggerPresent
FindClose
CreateFileMappingA
FreeEnvironmentStringsA
GetModuleHandleA
LocalUnlock
LocalFree
HeapCreate
GetFullPathNameA
GetStdHandle
CloseHandle
LoadLibraryExA
DisconnectNamedPipe

user32

SetFocus
GetIconInfo
GetDlgItem
GetMessageA
DefWindowProcA
PostMessageA
GetDC
ScrollWindow
IsWindow
DispatchMessageA
EmptyClipboard
EndDialog
CreateDialogParamA
DrawIconEx

uxtheme

EnableTheming
GetThemeMetric
CloseThemeData
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ