2af653f7ddb965eba27addcf49723ac9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af653f7ddb965eba27addcf49723ac9_JaffaCakes118
Size

352KB
MD5

2af653f7ddb965eba27addcf49723ac9
SHA1

5724881de37842067d3cb5b87a1667b5f184aea0
SHA256

16f47f9332394e8eea47f0b4abe0c47cac94abf26ae486798bd61597cfed978c
SHA512

e7787eaff9c7fa4bc0981d6a823104b7dd57e64d796271bdca1d510c48a258d33da81f79ac8577ec73150af52cca50caeca6b23ccc2a14d4317444c1b98dfe16
SSDEEP

6144:9mD0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nGOUiry:9K08N5qAWgko8wR54aN7mwsSry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af653f7ddb965eba27addcf49723ac9_JaffaCakes118

Files

2af653f7ddb965eba27addcf49723ac9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d5b9165c78be80362a861dec6ef8f07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GlobalLock
GetConsoleTitleW
LoadLibraryExW
GlobalUnlock
LocalFlags
GetSystemTime
VirtualProtectEx
IsBadReadPtr
OpenMutexA
OpenMutexA
lstrlenA
GetLastError
FreeConsole
GetModuleHandleA
GetACP
GetStdHandle
FindClose
LocalFree
CloseHandle

user32

GetSubMenu
GetMessageA
GetParent
GetDlgItemTextA
DialogBoxParamA
GetKeyState
IsIconic
ClipCursor
IsMenu
LoadCursorA
EndDialog
CreateWindowExA
GetMessageA
MessageBoxA

uxtheme

CloseThemeData
EnableTheming
DrawThemeText
DrawThemeBackground
GetCurrentThemeName

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ