64e041ba551efc2bf7838b8f8b6e834c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64e041ba551efc2bf7838b8f8b6e834c_JaffaCakes118
Size

338KB
MD5

64e041ba551efc2bf7838b8f8b6e834c
SHA1

e2ff591274eee6b69e85a77fd90788fe79966a54
SHA256

78c93b75a7e86f7752c9691f24801cfd46386488117d6133fcfd274e93eb8d52
SHA512

f2325c4f89ae3da48011952dc506e175d840d6bae0400170836ee3e753c73c0300ef40943d3f8d42f1a7846b62ebf533e7ff8ad0f0f5119ceb6b11272e6fc24c
SSDEEP

6144:3mAMkaiBuP9AioZZLI3f6xYESJMy2VPnyiYKcrzzI:3mAWJVloZZZYFJMy2NnyzKuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64e041ba551efc2bf7838b8f8b6e834c_JaffaCakes118

Files

64e041ba551efc2bf7838b8f8b6e834c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a4ad2951be94d33b2889e25869c8037

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
MapViewOfFile
LocalFree
CreateFileA
FindClose
GetLastError
CreateEventA
FreeEnvironmentStringsA
GetACP
lstrlenA
HeapCreate
LoadLibraryExA
GlobalLock
GetStdHandle
GetConsoleCP
IsBadReadPtr
GetCPInfo
GlobalUnlock
GetDriveTypeA

user32

DialogBoxParamA
GetSubMenu
RedrawWindow
CheckMenuItem
ClipCursor
EndDialog
CreateWindowExA
GetMessageA
GetParent
IsMenu
GetDlgItem
SetFocus
GetDlgItemTextA
DrawIconEx

apphelp

SdbFindFirstTag
SdbCloseDatabase
ApphelpCheckRunApp
ApphelpShowDialog
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ