35a47a125c78292f4e26bad5ae57d236_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a47a125c78292f4e26bad5ae57d236_JaffaCakes118
Size

815KB
MD5

35a47a125c78292f4e26bad5ae57d236
SHA1

5905c4a1b6a18c7c12870fdfcd56a9b48ec53a7a
SHA256

3a7885ac25a911e54c62aea124aa4d9a6689c809712f5170c502f07df78266f9
SHA512

f9885d85b738f3931a7ede4b6fc503b01756828f47022a3ea8677f614842ca168fb5410b1e8e5132d7d6805463d9126e51713d25ef160816b23e8a223ca12f8a
SSDEEP

24576:ugLcla8t3w5mk0ZP5NB7zBajoFme10TO4u5:ufPtA5m1p/BfUjot2TO4u5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a47a125c78292f4e26bad5ae57d236_JaffaCakes118

Files

35a47a125c78292f4e26bad5ae57d236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfcbc8dbc7c243a1ff58c24fff81cac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
LocalFree
FreeEnvironmentStringsA
GetLastError
HeapCreate
GetModuleHandleA
GetConsoleCP
CreateFileA
IsDebuggerPresent
GlobalLock
LoadLibraryExA
CloseHandle
FindClose
GetPrivateProfileIntA
lstrlenW
IsBadReadPtr
GetACP
CreateFileMappingA
CreateEventA
LocalUnlock

user32

GetDlgItem
GetDC
IsWindow
CheckMenuItem
SetFocus
GetDlgItemTextA
EndDialog
DialogBoxParamA
DispatchMessageA
RedrawWindow
GetMessageA
GetIconInfo
GetListBoxInfo
DrawIconEx

uxtheme

DrawThemeIcon
GetThemeMetric
CloseThemeData
GetThemeColor
EnableTheming

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ