3e1e51815f4d78132c1fe0f40bb956b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1e51815f4d78132c1fe0f40bb956b5_JaffaCakes118
Size

342KB
MD5

3e1e51815f4d78132c1fe0f40bb956b5
SHA1

b7321cc5676b973b101a420a492ea85be12f2ae7
SHA256

faa1f5b16cd36de2729f857a1ca40087a739941ba45e71ac97d03745189f1dd1
SHA512

ee36ef019921af41aee17af28a2538994e94ecb1ec37e4269719b01945a8426a388f29e92faf74f0931b38be525e7da08ef2e0546a9898d873516e432101d2b2
SSDEEP

6144:7AHtkYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gKroYu:7JYvDsakbClM2pxYB3CuM/xib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1e51815f4d78132c1fe0f40bb956b5_JaffaCakes118

Files

3e1e51815f4d78132c1fe0f40bb956b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

583425273cdc70e10df1a2002bc9150f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
LoadLibraryExA
GetConsoleCP
GetLastError
HeapCreate
CreateEventA
GetACP
IsBadReadPtr
CreateFileMappingA
lstrlenA
CreateMailslotA
GetStdHandle
CloseHandle
GetModuleHandleA
CreateFileA
LocalFree
FindClose
GlobalUnlock
IsDebuggerPresent
GlobalLock

user32

IsMenu
GetIconInfo
CheckMenuItem
SetFocus
GetDlgItemTextA
GetDC
GetMessageA
EndDialog
DialogBoxParamA
DispatchMessageA
RedrawWindow
GetDlgItem
GetListBoxInfo
DrawIconEx

uxtheme

CloseThemeData
GetThemeMetric
DrawThemeIcon
GetThemeColor
EnableTheming

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ