4465c6d6624a3499dcee525159470e55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4465c6d6624a3499dcee525159470e55_JaffaCakes118
Size

342KB
MD5

4465c6d6624a3499dcee525159470e55
SHA1

9449d3ea64a49a33551c2e756dd2d81d6e915fe8
SHA256

12b246a145cc2aadd003a3bc3ef3b272f47e656c7977bed3abf781601c70cda3
SHA512

511b5868938c0cf76ca1d7f6f677579abc7465fb553b3aefd0aea9869e1f9d959fd2e52936c44feced4db1174607269c9e8f84ec47c16b9273026fa187a8fdbd
SSDEEP

6144:Dtr2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX6s2BwWI+Ic:cyBe2Y0+iiZpJNANCFRBGGcl6rvkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4465c6d6624a3499dcee525159470e55_JaffaCakes118

Files

4465c6d6624a3499dcee525159470e55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d698eee3be337c1bf3f85b89039a6738

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
CreateFileMappingA
lstrlenA
LocalFree
GlobalLock
FreeEnvironmentStringsA
GetConsoleCP
GetLastError
GetModuleHandleA
IsBadReadPtr
GetACP
HeapCreate
GetStdHandle
CloseHandle
CreateEventA
FindClose
IsDebuggerPresent
GetPrivateProfileIntA
CreateFileA

user32

GetDC
GetListBoxInfo
SetFocus
GetIconInfo
RedrawWindow
GetDlgItemTextA
DispatchMessageA
GetDlgItem
CheckMenuItem
DialogBoxParamA
GetMessageA
IsWindow
EndDialog
DrawIconEx

uxtheme

DrawThemeIcon
EnableTheming
GetThemeColor
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ