3e98237258124b2b5ac31e0a2f74486c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e98237258124b2b5ac31e0a2f74486c_JaffaCakes118
Size

340KB
MD5

3e98237258124b2b5ac31e0a2f74486c
SHA1

02f85a42c3fc487baa73652ee0336d5e4e3d7515
SHA256

18cf58921d577520ddd72febc42965544c41d7596abbb8aa42277b7562f90656
SHA512

17928aa70cd2a4f9603ffa30dacfa6215063d0f4137cd2b3d47e8538e63efc60089cba3d9fbe704eb4854e9ee42606ae3102add6a7b7113946b47363496ab3c0
SSDEEP

6144:PF9suOXmGrXBjKafe1vJdXfuSm95pzSZsOwuhB2MjypwsKrymbFL31IMDRssSOld:P0VmAXYafebfu39YBThFCAN35VPXGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e98237258124b2b5ac31e0a2f74486c_JaffaCakes118

Files

3e98237258124b2b5ac31e0a2f74486c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c442d34657d16043e43cd786f228af95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
lstrlenW
GetConsoleCP
CreateEventA
CreateFileMappingA
GetModuleHandleA
IsDebuggerPresent
GetStdHandle
FindClose
FreeEnvironmentStringsA
GlobalLock
CloseHandle
HeapCreate
CreateFileA
GetACP
LocalFree
GetLastError
IsBadReadPtr
GetPrivateProfileIntA

user32

GetDlgItemTextA
GetDlgItem
GetIconInfo
DispatchMessageA
GetMessageA
SetFocus
RedrawWindow
IsWindow
GetDC
CheckMenuItem
GetListBoxInfo
EndDialog
DialogBoxParamA
DrawIconEx

uxtheme

CloseThemeData
EnableTheming
DrawThemeIcon
GetThemeMetric
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ