40037f7e9451f140f4c132e0aa90a1e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40037f7e9451f140f4c132e0aa90a1e7_JaffaCakes118
Size

352KB
MD5

40037f7e9451f140f4c132e0aa90a1e7
SHA1

815048c57e6eee8ec1ea3ce98f62991946c95e56
SHA256

73865d90d48c6ae3798c579cc97c832e43c8005833e28c2d1a7d0f69deb9be26
SHA512

d49cc9f50c73b0037b754d111805bbca9f5f69e018ab03df8e00720ffe06296b6df2cbfc94053008abc499f7c2ef6d79f9ad16cf0225cecbaba0f0bd894edfe0
SSDEEP

6144:7mD0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nGOUiry:7K08N5qAWgko8wR54aN7mwsSry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40037f7e9451f140f4c132e0aa90a1e7_JaffaCakes118

Files

40037f7e9451f140f4c132e0aa90a1e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d5b9165c78be80362a861dec6ef8f07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GlobalLock
GetConsoleTitleW
LoadLibraryExW
GlobalUnlock
LocalFlags
GetSystemTime
VirtualProtectEx
IsBadReadPtr
OpenMutexA
OpenMutexA
lstrlenA
GetLastError
FreeConsole
GetModuleHandleA
GetACP
GetStdHandle
FindClose
LocalFree
CloseHandle

user32

GetSubMenu
GetMessageA
GetParent
GetDlgItemTextA
DialogBoxParamA
GetKeyState
IsIconic
ClipCursor
IsMenu
LoadCursorA
EndDialog
CreateWindowExA
GetMessageA
MessageBoxA

uxtheme

CloseThemeData
EnableTheming
DrawThemeText
DrawThemeBackground
GetCurrentThemeName

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ