3133b14aad7e37f982b266bee151c9dc_JaffaCakes118 | Triage

Sharing

General

Target

3133b14aad7e37f982b266bee151c9dc_JaffaCakes118
Size

342KB
MD5

3133b14aad7e37f982b266bee151c9dc
SHA1

667cfad5a749decad209d93e8a4fbd521b996ff0
SHA256

432899e934c59ef660b6f37ce54786ede67bab2df27e975012fefdb4daacc5a9
SHA512

14a99169648ed02ef8252bb60c2b03a2568a05aa125925f702e9fe293c5f974a766d1be5fd8185d276804efbd59dfdf284ba95b255985cbed214f449631292e6
SSDEEP

6144:EwtyLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/2Ms4VN:WFhgh2R8O+yFqpLh+eM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3133b14aad7e37f982b266bee151c9dc_JaffaCakes118

Files

3133b14aad7e37f982b266bee151c9dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a91d276fa375d842d2c80c729b6ee5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
lstrlenA
CreateEventA
CloseHandle
CreateFileA
FindClose
IsDebuggerPresent
GlobalLock
CreateWaitableTimerA
GetModuleHandleA
GetConsoleCP
LocalFree
GlobalUnlock
GetLastError
IsBadReadPtr
CreateFileMappingA
GetACP
LoadLibraryExA
FreeEnvironmentStringsA
HeapCreate

user32

SetFocus
RedrawWindow
IsMenu
GetSubMenu
GetDlgItemTextA
GetParent
GetDlgItem
GetMessageA
ClipCursor
CheckMenuItem
DispatchMessageA
DialogBoxParamA
EndDialog
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag
ApphelpShowDialog
SdbCloseDatabase

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ