18defc7aae5fef3e179c67af82a7c4ad_JaffaCakes118 | Triage

Sharing

General

Target

18defc7aae5fef3e179c67af82a7c4ad_JaffaCakes118
Size

352KB
MD5

18defc7aae5fef3e179c67af82a7c4ad
SHA1

a4e4bed6d2be96d78a472484531ae099bb625df7
SHA256

819521b5798e65d022270dca96591b2f3330d08931c0597fb73a2066a037b83e
SHA512

74276e1201fd319e3368bf42960df8be0b84053a54ddf19c9ba50e1c2765b77c6b86cc7b714c8753fcf53d5a66849aa5fd694d1e53e69133ee6c3ee2ce326077
SSDEEP

6144:Smz0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3niCIHQVT:S208N5qAWgko8wR54aN7mwsSMHQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18defc7aae5fef3e179c67af82a7c4ad_JaffaCakes118

Files

18defc7aae5fef3e179c67af82a7c4ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

060c3b178ea6654333e0eea8aed73540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
FreeConsole
LoadLibraryExW
GlobalUnlock
GetStdHandle
LocalFlags
GetModuleHandleA
VirtualProtectEx
OpenMutexA
GetSystemTime
CloseHandle
lstrlenA
GetACP
OpenMutexA
GetConsoleTitleW
IsBadReadPtr
FindClose
GetLastError
LocalFree
GlobalLock

user32

LoadCursorA
GetDlgItemTextA
GetParent
EndDialog
IsMenu
IsIconic
GetMessageA
ClipCursor
GetMessageA
DialogBoxParamA
GetKeyState
CreateWindowExA
GetSubMenu
MessageBoxA

uxtheme

GetCurrentThemeName
EnableTheming
DrawThemeText
CloseThemeData
DrawThemeBackground

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ