5e04f4c1ee63696260f5077e75a24263_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e04f4c1ee63696260f5077e75a24263_JaffaCakes118
Size

815KB
MD5

5e04f4c1ee63696260f5077e75a24263
SHA1

1b7656ec9441b9961cc7c7f7c4e14576b4de56fc
SHA256

ea8c2d56f2f33306ff4b496d6bcae0ea530f9fbc1144a2968eb4867aba8fa39b
SHA512

cbdba4ba33c46b8a5f1fbb1cc8b3df9d04fae88901a1d1cc8f2b5476ca1b5763474c8d1a630553d15167492cc29a31e7a0f61237016ce8d6a6cfcbc9e33b85d1
SSDEEP

12288:MEwplZHXsOyBbWAnc2JqCKQPUhm1HwbD/OqMJsaRc2lm2AGVoPr2XlbQ:JwfZH8OFGXJqOmm12Oq+Rlm2AGur2Xls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e04f4c1ee63696260f5077e75a24263_JaffaCakes118

Files

5e04f4c1ee63696260f5077e75a24263_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9a28e34b7b0d2c413a594bca31c463e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
LoadLibraryExA
CloseHandle
CreateEventA
DisconnectNamedPipe
FreeEnvironmentStringsA
FindClose
LocalFree
HeapCreate
GetStdHandle
GetConsoleCP
GetFullPathNameA
GlobalLock
CreateFileMappingA
CreateFileA
GetACP
IsBadReadPtr
GetLastError
IsDebuggerPresent
GetModuleHandleA

user32

DispatchMessageA
CreateDialogParamA
DefWindowProcA
ScrollWindow
GetMessageA
GetDlgItem
GetIconInfo
SetFocus
EndDialog
GetDC
EmptyClipboard
IsWindow
PostMessageA
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
DrawThemeIcon
GetThemeColor
EnableTheming

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ