2afe7c3bc0bc2a2d0b1508d9434fabed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2afe7c3bc0bc2a2d0b1508d9434fabed_JaffaCakes118
Size

352KB
MD5

2afe7c3bc0bc2a2d0b1508d9434fabed
SHA1

90a1c4cf7a85b70ea62417e3e2dcca2e028e2802
SHA256

85c4f7619386faa5c15210b9e90a46dd17fbfb5cf7a404dad6ef8b9682b858cc
SHA512

197f2923adaef68f2e519711d49fad6933f64ecf2af2c8d83ea55d4ad3774b4ce32aaf93c90de96416010a574b7fbe8921a4ce60d02f69f921c0cb4e67c7d403
SSDEEP

6144:kmn0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3ncdM+:k208N5qAWgko8wR54aN7mwsSM2+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2afe7c3bc0bc2a2d0b1508d9434fabed_JaffaCakes118

Files

2afe7c3bc0bc2a2d0b1508d9434fabed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b9b11ca8c911eeb58cf849b509fc41a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
IsBadReadPtr
GetLastError
LoadLibraryExW
FindClose
LocalFree
CreateEventA
GlobalUnlock
GetSystemTime
GetACP
LocalFlags
OpenMutexA
GetModuleHandleA
GetStdHandle
CloseHandle
VirtualProtectEx
lstrlenA
GetConsoleTitleW
GlobalLock
OpenMutexA

user32

IsIconic
GetMessageA
GetDlgItemTextA
GetKeyState
GetParent
DialogBoxParamA
EndDialog
CreateWindowExA
GetMessageA
LoadCursorA
GetSubMenu
IsMenu
ClipCursor
MessageBoxA

uxtheme

CloseThemeData
DrawThemeBackground
GetCurrentThemeName
EnableTheming
DrawThemeText

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ