247301ab19000382e1323c6b9c387b4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

247301ab19000382e1323c6b9c387b4f_JaffaCakes118
Size

140KB
MD5

247301ab19000382e1323c6b9c387b4f
SHA1

56d7ba2ffad453b03c83ed5b0e52ba9ad0b5420b
SHA256

82b75cccb49b79347c01a77f7a3e486a13b4b056c66b294dd15536e34c6e080e
SHA512

c4b68360fbe83e805cb903e7059f76c29d6b1ee7248fab60aa789b5a1d5b00f7eff6278c6fae80ed8f8e4046861f9001603a9f59b04cbda2f99532bcc1506e7a
SSDEEP

1536:Kyk7KBqSDzxjFMlk5WMtQPcc1Msn0gtgMW3siAaJoANC+cwXw8Tcw63yb4FHkVEE:Zk74BDtjzLtQSsnRPW3MGhcw63vtqUF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
247301ab19000382e1323c6b9c387b4f_JaffaCakes118

Files

247301ab19000382e1323c6b9c387b4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4888b5bb03853465679660025d3cd6d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetStdHandle
GlobalLock
CreateEventA
GetConsoleCP
lstrlenA
GetLastError
HeapCreate
LoadLibraryExA
IsBadReadPtr
LocalFree
IsDebuggerPresent
CreateMailslotW
FindClose
CloseHandle
CreateFileMappingA
FreeEnvironmentStringsA
GetModuleHandleA
GetACP
CreateFileA

user32

GetIconInfo
DispatchMessageA
GetDC
GetMessageA
GetDlgItem
RedrawWindow
GetListBoxInfo
IsWindow
DialogBoxParamA
CheckMenuItem
GetDlgItemTextA
SetFocus
EndDialog
DrawIconEx

uxtheme

GetThemeColor
EnableTheming
CloseThemeData
DrawThemeIcon
GetThemeMetric

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ