149d8f37ecc227cd570ca5740206e44f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

149d8f37ecc227cd570ca5740206e44f_JaffaCakes118
Size

342KB
MD5

149d8f37ecc227cd570ca5740206e44f
SHA1

66691b9d56ce7dc54deb421b1cbc551c02095a84
SHA256

ca18d9573055e3cb819f486f24f68827b964ffc726df04bfca4cb2747a5b5e34
SHA512

19cb107eeba3bdfb952e2067265284fd5f6d5a20db418e3826ba0fd686372b89f2646ebc0bf686aec3ff1cb7b5dff6e3d0bc7269aaa824b23b6d36fb2e8aa25a
SSDEEP

6144:axtEYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gmzpe:pYvDsakbClM2pxYB3CuM/xLzpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149d8f37ecc227cd570ca5740206e44f_JaffaCakes118

Files

149d8f37ecc227cd570ca5740206e44f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb5e522777a9dbf645331e739e295bcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateEventA
IsDebuggerPresent
CreateFileMappingA
IsBadReadPtr
lstrlenA
CreateFileA
GetACP
GetConsoleCP
GlobalUnlock
GetModuleHandleA
GetStdHandle
GlobalLock
HeapCreate
GetLastError
LoadLibraryExA
CloseHandle
LocalFree
FreeEnvironmentStringsA
CreateMailslotA

user32

EndDialog
GetDC
DispatchMessageA
SetFocus
GetDlgItem
RedrawWindow
GetListBoxInfo
GetMessageA
GetDlgItemTextA
IsMenu
DialogBoxParamA
GetIconInfo
CheckMenuItem
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ