38098a3d1f9347ff8a78ba81293083fb_JaffaCakes118 | Triage

Sharing

General

Target

38098a3d1f9347ff8a78ba81293083fb_JaffaCakes118
Size

342KB
MD5

38098a3d1f9347ff8a78ba81293083fb
SHA1

e49ab2e9c6965742db8f5b67d6529662d117053e
SHA256

45f3cf19bb0933ae65bd146029313363c3fabf8c372e7b46598089cb24a3246e
SHA512

3c745fad49b78e10a5b0c993ebc0640377c74f7de9915604ad84b3e097b4ca517652c53919e809a9c02cfc7a977a8d68455a513c39bed68d33b8dc80c3f9fb6b
SSDEEP

6144:mEt8YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gIU7Fc:CYvDsakbClM2pxYB3CuM/xJUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38098a3d1f9347ff8a78ba81293083fb_JaffaCakes118

Files

38098a3d1f9347ff8a78ba81293083fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

660f1be7393c478d018ae161049e9fec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
lstrlenA
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA

user32

RedrawWindow
CheckMenuItem
GetDlgItem
DispatchMessageA
GetListBoxInfo
GetDlgItemTextA
GetDC
GetMessageA
DialogBoxParamA
SetFocus
GetIconInfo
EndDialog
IsMenu
DrawIconEx

uxtheme

GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ