2ab65454ef2a8ed784e9a068cc4682a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab65454ef2a8ed784e9a068cc4682a6_JaffaCakes118
Size

24KB
MD5

2ab65454ef2a8ed784e9a068cc4682a6
SHA1

9c691be8b5c006bccbd30ef8f0f0f4bc1b1c7e71
SHA256

15aa515c1ee5a7a79a5a41d48df8520b0ba2ec878f3d511b139d04a9bc4a6027
SHA512

e74be080fa8f84c854f9128516eab8c93bf3f6acac2600a3be5e3f5bdcacccf79730fd5ba2daf05d6d02e21571142bf0fa9ee337af7830b7e38139e2db770403
SSDEEP

384:jjWEzp/Q/fCFzT5onk64Gj9dNqNM3hDXvhAk+8+s5wUIogOi:jjWEzpI/GzTwkGXNd3NXvyk+8h5kT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab65454ef2a8ed784e9a068cc4682a6_JaffaCakes118

Files

2ab65454ef2a8ed784e9a068cc4682a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31ea477462108e13e767738932c1ad19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
LocalFree
IsDebuggerPresent
HeapCreate
CreateFileA
GlobalLock
GetLastError
FreeEnvironmentStringsA
CreateFileMappingA
CloseHandle
IsBadReadPtr
GetPrivateProfileIntA
GetACP
LocalUnlock
GetModuleHandleA
GetConsoleCP
LoadLibraryExA
FindClose
lstrlenW
GetStdHandle

user32

SetFocus
IsWindow
GetDlgItem
GetDC
EndDialog
CheckMenuItem
RedrawWindow
DispatchMessageA
GetIconInfo
GetListBoxInfo
GetDlgItemTextA
DialogBoxParamA
GetMessageA
DrawIconEx

uxtheme

EnableTheming
DrawThemeIcon
CloseThemeData
GetThemeMetric
GetThemeColor

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ