0bdafb3046b00546812e32f3e7a4de1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bdafb3046b00546812e32f3e7a4de1d_JaffaCakes118
Size

341KB
MD5

0bdafb3046b00546812e32f3e7a4de1d
SHA1

7e0b2ae060c30cf1ce74168070c505c70add9ecd
SHA256

ca5dc3b836e3a75053814fa481c8674ce01af2b7ac1059adb72abd6c9c3ab47a
SHA512

1867083b5884ea5ce57ddf99be6fbe2f27ac48f3e01ed7b68fc0d9f38ce2aef97a333879967516915ed9fbebf7c9c5120162e509d80ec831df60ab42575759df
SSDEEP

6144:nlPpI+XgUhnXMrBRw1N87jSNAfucBbOigrVM5GmPqxMV1qG37Re0Rxaj:lPp/DXMrBRoPWfLBqxVM5PCIqLcaj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bdafb3046b00546812e32f3e7a4de1d_JaffaCakes118

Files

0bdafb3046b00546812e32f3e7a4de1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

741b27b6d14eaa33a874848466b88e79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetConsoleCP
CreateFileMappingA
CloseHandle
LocalFree
GetStdHandle
LoadLibraryExA
IsDebuggerPresent
lstrlenA
GetModuleHandleA
FindClose
GlobalLock
GlobalUnlock
CreateFileA
IsBadReadPtr
CreateMailslotW
CreateEventA

user32

SetFocus
GetDlgItem
DialogBoxParamA
CheckMenuItem
RedrawWindow
GetDC
GetDlgItemTextA
GetListBoxInfo
GetMessageA
IsWindow
DispatchMessageA
GetIconInfo
EndDialog
DrawIconEx

uxtheme

GetThemeMetric
DrawThemeIcon
GetThemeColor
CloseThemeData
EnableTheming

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ