64ddfd0f8e35f01327cf54478fdf661d_JaffaCakes118 | Triage

Sharing

General

Target

64ddfd0f8e35f01327cf54478fdf661d_JaffaCakes118
Size

815KB
MD5

64ddfd0f8e35f01327cf54478fdf661d
SHA1

1f99e1d7dc803424d8fb04054a12679b3d3aa0fa
SHA256

088036495a0965f23b86b1d02658d5696e038bbe78a11198ff4074ca804682d3
SHA512

bbdc36251f79944aa0c06408a1e5799a75195c4ac82bda12eaabd07ccc709aeed3ffc09295878bb1f01e56be673969185feff277df319a13ffd8cae8a3154b9e
SSDEEP

12288:TEYF6heHX/3DLnX11hFt+u9Rk/swK26sYVP2N5ddNmpJP9Dao372mukZBnaZRuwo:gYFl7pjYEx+Dcz139ZqlOXqsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ddfd0f8e35f01327cf54478fdf661d_JaffaCakes118

Files

64ddfd0f8e35f01327cf54478fdf661d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9681004073b7ab7a93cec1a918fb23cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetConsoleCP
LoadLibraryExW
Sleep
CreateFileA
GetModuleHandleA
FreeEnvironmentStringsA
GetACP
LocalFree
CreateMutexA
FindAtomA
GlobalUnlock
SignalObjectAndWait
TlsGetValue
GetLastError
HeapCreate
FindClose
CreateFileMappingA
CloseHandle
GlobalLock

user32

DispatchMessageA
GetIconInfo
FillRect
CheckRadioButton
GetDC
CallWindowProcA
GetFocus
CopyRect
GetDlgItem
IsWindow
DefWindowProcW
DrawFrame
DrawEdge
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ