191d3307b50162ad6be3a1e920c2c2e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191d3307b50162ad6be3a1e920c2c2e8_JaffaCakes118
Size

342KB
MD5

191d3307b50162ad6be3a1e920c2c2e8
SHA1

68f56ba1497b76759b6335cddc9f91286e4cee67
SHA256

1bf0bc79f22401fb8fdc4ded2338c3af3a5b7384d8996ca627d84132a29a3d32
SHA512

c4ebe1b2987ca498648c2a216417fbfa82668733c265fcce49888b1dfd323814bf2fd6a27db367918f233bb5ca6874c6796849eddb7a991637a533b226a27ed6
SSDEEP

6144:9ojtm2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX64NP5Ch+Is:9gyBe2Y0+iiZpJNANCFRBGGcl64NPcUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191d3307b50162ad6be3a1e920c2c2e8_JaffaCakes118

Files

191d3307b50162ad6be3a1e920c2c2e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3362497989692187bfa5bad86f48dded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
GetPrivateProfileIntA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsWindow
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ