250a6a0b46b9a6183fad6d1c4b2e50f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

250a6a0b46b9a6183fad6d1c4b2e50f4_JaffaCakes118
Size

384KB
MD5

250a6a0b46b9a6183fad6d1c4b2e50f4
SHA1

bd782e68cf2b691484c6fef8c3d34f085c1fdd2c
SHA256

8a4ae286a4daf47bcf152bc5076fa494d8361778929e4ec3570fe4552d6b6ce0
SHA512

f3a293dca8be4e3c43d21877f8bcaa6560f963227b37b5469326a31c61ae14080b31cfd246f3229b5526719ebda0f8504f9f93c966cc990980621f81a0204744
SSDEEP

6144:FAthERv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OE:AgR5GdCs0O1BkBqwtjFc0fTjZOT59ozt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250a6a0b46b9a6183fad6d1c4b2e50f4_JaffaCakes118

Files

250a6a0b46b9a6183fad6d1c4b2e50f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe1115d54ae7a58e955a0facc7d50f89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetLastError
CreateFileA
GlobalLock
GetFullPathNameA
IsBadReadPtr
CreateFileMappingA
CloseHandle
HeapCreate
GetStdHandle
LocalUnlock
FreeEnvironmentStringsA
CreateEventA
GetACP
GetConsoleCP
FindClose
DisconnectNamedPipe
LocalFree
GetModuleHandleA
LoadLibraryExA

user32

ScrollWindow
SetFocus
GetDC
DispatchMessageA
EndDialog
GetIconInfo
IsWindow
GetDlgItem
DefWindowProcA
PostMessageA
GetMessageA
EmptyClipboard
CreateDialogParamA
DrawIconEx

uxtheme

EnableTheming
DrawThemeIcon
GetThemeColor
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ