4d36d015c602b22249cdb9487b753b2e_JaffaCakes118 | Triage

Sharing

General

Target

4d36d015c602b22249cdb9487b753b2e_JaffaCakes118
Size

352KB
MD5

4d36d015c602b22249cdb9487b753b2e
SHA1

c7ca3f1519671eaa6e0c2bb991cfc43b000718ea
SHA256

a13776d9d8202205ba8b9dc3aa84ceda87dd7e4d1a583d5c5dce90bbdb19299c
SHA512

8f337633de3080ac39c384636d8aeefd48cb1445adc4ab81d2919384be5feb3e7637c552db9f15592fe8509dc91a59bfc3ad576ad2bf27c1821b5a771ca46fc7
SSDEEP

6144:mmM0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nPU7Fp:mJ08N5qAWgko8wR54aN7mwsSfUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d36d015c602b22249cdb9487b753b2e_JaffaCakes118

Files

4d36d015c602b22249cdb9487b753b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a9a9360c6b1a0fe95e639f2a1a86099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
LoadLibraryExW
LocalFree
GlobalLock
FreeConsole
LocalFlags
VirtualProtectEx
FindClose
GetLastError
IsBadReadPtr
GetConsoleTitleW
CloseHandle
GetACP
GlobalUnlock
OpenMutexA
lstrlenA
GetSystemTime
GetStdHandle
GetModuleHandleA
CreateEventA

user32

GetParent
LoadCursorA
GetMessageA
CreateWindowExA
GetSubMenu
GetDlgItemTextA
IsIconic
GetMessageA
DialogBoxParamA
GetKeyState
ClipCursor
EndDialog
IsMenu
MessageBoxA

uxtheme

GetCurrentThemeName
EnableTheming
DrawThemeText
CloseThemeData
DrawThemeBackground

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ