370f9b21975f046aadcc47c008cb8a1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

370f9b21975f046aadcc47c008cb8a1c_JaffaCakes118
Size

342KB
MD5

370f9b21975f046aadcc47c008cb8a1c
SHA1

7e467373581dabd8ecfd0944db6c1eb66f2dd87c
SHA256

0a801546b3d11ab7f6e8e878a5a6ee31691e5ff193041c514a97738d23215e50
SHA512

59b0f792b0dda86de04be7821131411a179200d77499e07d22c589def64108841f4a92ebf9f636691651532cde76912e4163da99fa1d7b359959bf1ffb9529cc
SSDEEP

6144:igt1YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gE33Ra:jYvDsakbClM2pxYB3CuM/xR30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370f9b21975f046aadcc47c008cb8a1c_JaffaCakes118

Files

370f9b21975f046aadcc47c008cb8a1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99b6e5f7c4178185c07855f0f2858f37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
CloseHandle
GlobalLock
FindClose
CreateMailslotA
GetACP
lstrlenA
FreeEnvironmentStringsA
GlobalUnlock
IsDebuggerPresent
IsBadReadPtr
LocalFree
GetModuleHandleA
HeapCreate
CreateFileMappingA
CreateFileA
GetConsoleCP
LoadLibraryExA
GetLastError
CreateEventA

user32

RedrawWindow
GetDlgItemTextA
GetDlgItem
GetDC
IsMenu
CheckMenuItem
GetIconInfo
EndDialog
GetMessageA
DispatchMessageA
DialogBoxParamA
GetListBoxInfo
SetFocus
DrawIconEx

uxtheme

DrawThemeIcon
CloseThemeData
EnableTheming
GetThemeColor
GetThemeMetric

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ