0f84034a61f34143f0880f8e6f0844da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f84034a61f34143f0880f8e6f0844da_JaffaCakes118
Size

352KB
MD5

0f84034a61f34143f0880f8e6f0844da
SHA1

24ab83bcf004a6832c976082b909fa0174a741d8
SHA256

88369c72302664be4d2653d0428638576861ad853dddbbd1a7cb147b7f833315
SHA512

7d291692fc234e919cfe393888f1188aa20296b6df526f7a210bb0efca1fb20c6e8abc1da32882dc1f989fb8ce9cd162b6a9f354e0c0bb6c8441c693d7428c43
SSDEEP

6144:gmA0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3njIqJ:g908N5qAWgko8wR54aN7mwsSzIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f84034a61f34143f0880f8e6f0844da_JaffaCakes118

Files

0f84034a61f34143f0880f8e6f0844da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f119d8a3d43bed51d86cabcd9312f3e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalLock
OpenMutexA
GetStdHandle
LocalFlags
GetConsoleTitleW
lstrlenA
CreateEventA
OpenMutexA
VirtualProtectEx
GetModuleHandleA
GetACP
FreeConsole
IsBadReadPtr
GetLastError
GetSystemTime
FindClose
LoadLibraryExW
LocalFree
GlobalUnlock

user32

GetKeyState
GetMessageA
ClipCursor
GetDlgItemTextA
GetSubMenu
LoadCursorA
IsIconic
EndDialog
DialogBoxParamA
GetMessageA
IsMenu
GetParent
CreateWindowExA
MessageBoxA

uxtheme

GetCurrentThemeName
EnableTheming
DrawThemeBackground
DrawThemeText
CloseThemeData

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ