23f07d1677692e0f44793f85ba2391f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23f07d1677692e0f44793f85ba2391f3_JaffaCakes118
Size

56KB
MD5

23f07d1677692e0f44793f85ba2391f3
SHA1

ca3d7a5e754b7ac6ec5133d87e56d8d6e4984853
SHA256

98d7221d6bcf059e7fa4a691d451dc5377a221fb0431cce27eb445076560ad2f
SHA512

fd929b9cc5fc1878c8db4b02311314081f10bf70bd5ec8b743f510705576b592377a87770206fdff8b39b01db894480aecebc6d50f9a6d9d3a999de0d4d8f89e
SSDEEP

768:71/AVZm5tw4EwDsPD5FDObMnaj3O4m29wrGVh1EOz9W6w2J7dHorPjmIrQI:7N5tHD2yInaj+40ynM1UFMjj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f07d1677692e0f44793f85ba2391f3_JaffaCakes118

Files

23f07d1677692e0f44793f85ba2391f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

636cdf3707f8106c99808adf9eaf51e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FindAtomA
FindClose
CreateFileMappingA
CreateMutexA
GetACP
GetModuleHandleA
HeapCreate
LoadLibraryExW
FreeEnvironmentStringsA
CloseHandle
SignalObjectAndWait
CreateFileA
LocalFree
GetLastError
TlsGetValue
GlobalUnlock
ExitProcess
GlobalLock
Sleep

user32

DispatchMessageA
CheckRadioButton
DefWindowProcW
CallWindowProcA
GetDC
DrawFrame
GetDlgItem
CopyRect
FillRect
GetIconInfo
GetFocus
DrawEdge
IsWindow
MessageBoxA

uxtheme

DrawThemeEdge
GetThemeSysInt
DrawThemeText
DrawThemeIcon
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ