1c345899fb575c78a8ffb27a646bdec3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c345899fb575c78a8ffb27a646bdec3_JaffaCakes118
Size

56KB
MD5

1c345899fb575c78a8ffb27a646bdec3
SHA1

343f32ff1094f1c4ff8730dc2ba5ed25f4e50797
SHA256

f22913b3be01abf6f50ada31cacb462b1cd7505516df0b5d2747b50340f0616a
SHA512

75f09ae7cab9268316f42eb1d02a56905d38180454d18c3da02d5ba90a7ebd414e11292b7a3b25107dd0eb9a9be33ad3d1c58f75b23c0bbd9264a8e3daa07d00
SSDEEP

1536:6TU7iNd3NXvXtkYlrqmcpXUx7taTd+nbyfxLkJVy:6TU7MtkYlrxMXUlysnbyflkJVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c345899fb575c78a8ffb27a646bdec3_JaffaCakes118

Files

1c345899fb575c78a8ffb27a646bdec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93c4fe3f6d9567323e106dd3adf6ff66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GlobalLock
CreateFileA
CreateFileMappingA
HeapCreate
FreeEnvironmentStringsA
GetModuleHandleA
LocalFree
IsBadReadPtr
FindClose
GetStdHandle
CloseHandle
GetACP
DisconnectNamedPipe
CreateEventA
GetConsoleCP
IsDebuggerPresent
GetFullPathNameA
LoadLibraryExA
LocalUnlock

user32

DefWindowProcA
GetDlgItem
SetFocus
GetIconInfo
PostMessageA
CreateDialogParamA
ScrollWindow
EmptyClipboard
DispatchMessageA
IsWindow
EndDialog
GetDC
GetMessageA
DrawIconEx

uxtheme

EnableTheming
DrawThemeIcon
GetThemeColor
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ