37a4dd28e7d1ef3455326114a695fc46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a4dd28e7d1ef3455326114a695fc46_JaffaCakes118
Size

342KB
MD5

37a4dd28e7d1ef3455326114a695fc46
SHA1

54a35397f7d5427ab9ea6ca82a5c79164d8da0f9
SHA256

3a20ab2e7d27477c0c0d8bbc74c660b59a671511f659696c3c960ef00139ed52
SHA512

e7a65683334fe19d46a67da6f724c799fc33006de15863d1b641eabaf19db203d90ed539fca8c8657e11e9d0ee7795e5a1c6aaf23ebbaf4d1d5d9e493fe486f5
SSDEEP

6144:JetitvYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvNP5Ch+Ic:4AYvDsakbClM2pxYB3CuM/x4NPcUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a4dd28e7d1ef3455326114a695fc46_JaffaCakes118

Files

37a4dd28e7d1ef3455326114a695fc46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f6511425028125f051dfbc1973eebe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
CreateMailslotA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsMenu
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ