59fe3d85d7bde3b6542fe50e41d6cd94_JaffaCakes118 | Triage

Sharing

General

Target

59fe3d85d7bde3b6542fe50e41d6cd94_JaffaCakes118
Size

815KB
MD5

59fe3d85d7bde3b6542fe50e41d6cd94
SHA1

724d52eead1e03bf68d1bf911cd761b77f1711cf
SHA256

72883a2adaaaa3216119a8a97a40dbb7cc75ce6db0a78a41008acae9b9be70e8
SHA512

bb4de85191e7b9cf38e14a1291585b4bc340374d03a1c03d8313681683c7b0da8a9e4b9837a1587953c91d07708be5dc84c3cc5018b46a8c5e5e89a8ea5eda23
SSDEEP

24576:H0M6ouLUtTPGqKU9oSGU32eQCrgwKeENRj:JLyUBKxSGcBp3pQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59fe3d85d7bde3b6542fe50e41d6cd94_JaffaCakes118

Files

59fe3d85d7bde3b6542fe50e41d6cd94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e05dfa9eea52e2b80492ac025252f866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateFileA
TlsGetValue
CloseHandle
LocalUnlock
GetLastError
HeapCreate
CreateEventA
IsDebuggerPresent
FindClose
GetACP
FreeEnvironmentStringsA
GetConsoleCP
CreateFileMappingA
GetModuleHandleA
GetStdHandle
GlobalLock

user32

EndDialog
DefWindowProcA
GetMessageA
ScrollWindow
DispatchMessageA
GetDlgItem
IsWindow
GetDC
PostMessageA
CreateDialogParamA
GetIconInfo
SetFocus
EmptyClipboard
DrawIconEx

uxtheme

GetThemeColor
GetThemeMetric
CloseThemeData
DrawThemeIcon
EnableTheming

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ