61c42aaf180a80eeaa227fd04337fde4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61c42aaf180a80eeaa227fd04337fde4_JaffaCakes118
Size

340KB
MD5

61c42aaf180a80eeaa227fd04337fde4
SHA1

5a3323b038d77d7ee01e93023a19fc34051cabf0
SHA256

2fdeb624774377528ae083673de6417b295892452e5eda8c74dd3c93fac9c422
SHA512

65736eb9e9519de677d0412490a208760298cd7f61f3c1a71b07ee94bb3af2457ee25b53cedd6b76499018407204e983daca9d671a686e28114daec5f99aae17
SSDEEP

6144:dBtRhsQbqhtONkYWiJ58I1YSXHUG6lv1CfOD+qS2ylusCCeeXFFJWnUhwgfi9mF0:d/smKOCm3UG6ldCvVceV6UhwAaIg3np

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c42aaf180a80eeaa227fd04337fde4_JaffaCakes118

Files

61c42aaf180a80eeaa227fd04337fde4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

687c3fdcddaecda4745570deacff0658

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
FindClose
GetDriveTypeA
GlobalUnlock
MapViewOfFile
GetConsoleCP
GlobalLock
GetLastError
LocalFree
GetModuleHandleA
CreateFileA
lstrlenA
CreateEventA
IsBadReadPtr
CloseHandle
HeapCreate
GetStdHandle
GetCPInfo
FreeEnvironmentStringsA
LoadLibraryExA

user32

DialogBoxParamA
CheckMenuItem
GetMessageA
GetDlgItem
RedrawWindow
SetFocus
ClipCursor
GetDlgItemTextA
IsMenu
EndDialog
GetParent
CreateWindowExA
GetSubMenu
DrawIconEx

apphelp

ApphelpShowDialog
SdbCloseDatabase
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ