41ef07f886770bd8bc564c06ff34dc31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ef07f886770bd8bc564c06ff34dc31_JaffaCakes118
Size

342KB
MD5

41ef07f886770bd8bc564c06ff34dc31
SHA1

95451ec22705fa8b9ff00e0dad3f7bd4eccdb122
SHA256

016ccbe46e622d4303b134d78b9f2c8e2f0af53be22bf58f211fb18b8251def8
SHA512

30d975ad1e2bd3273d61f449cf0e50f40f9608865f75d6378e8ff90547c79ff79c00bf5e1feb09d5715046c8963687d3e7d4e058d253a299fb8bed3d79f50ed4
SSDEEP

6144:xV0tTYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gub3B:wYvDsakbClM2pxYB3CuM/xv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ef07f886770bd8bc564c06ff34dc31_JaffaCakes118

Files

41ef07f886770bd8bc564c06ff34dc31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89b61036bfa6c1f1d141ae0ff9137638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
CreateEventA
FindClose
IsBadReadPtr
GetStdHandle
lstrlenA
GetACP
HeapCreate
CreateFileMappingA
CloseHandle
GlobalUnlock
GlobalLock
FreeEnvironmentStringsA
LocalFree
CreateMailslotA
CreateFileA
GetConsoleCP
IsDebuggerPresent
GetLastError
GetModuleHandleA

user32

GetDlgItem
IsMenu
GetIconInfo
RedrawWindow
GetListBoxInfo
GetDlgItemTextA
DialogBoxParamA
DispatchMessageA
EndDialog
GetDC
SetFocus
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
EnableTheming
DrawThemeIcon
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ