631ca8942c6adce3f31aaa29877dc52e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

631ca8942c6adce3f31aaa29877dc52e_JaffaCakes118
Size

815KB
MD5

631ca8942c6adce3f31aaa29877dc52e
SHA1

9635aab66ed940ec0b2d077f9dccd119041c6fe9
SHA256

6e23e918a2dbd5bf4477c74912e2d74f26bdb30f15fbbd53993e67c79c8feee5
SHA512

f669c405859ac4a8ff5866947f1e2eebe6df776a18926a359ca75f8c2ed56594d8f6032449c7e06162b86fc530111f1f547653f404049e850b093ee78e0a3ee0
SSDEEP

24576:xmC5+3+ryL/Hshu0M1CRmeWkBw9L5gAc2TadkYO3t:r5+3GyL/3CRmqw9L5gX2TOkr3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
631ca8942c6adce3f31aaa29877dc52e_JaffaCakes118

Files

631ca8942c6adce3f31aaa29877dc52e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2712fd0bb2b21bebc31f3088be7866f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
LoadLibraryExA
FindClose
CreateEventA
GetPrivateProfileIntA
LocalUnlock
HeapCreate
IsDebuggerPresent
GetACP
CloseHandle
CreateFileA
lstrlenW
GetModuleHandleA
GetStdHandle
LocalFree
GetLastError
FreeEnvironmentStringsA
GlobalLock
GetConsoleCP
IsBadReadPtr

user32

SetFocus
IsWindow
GetDlgItemTextA
GetListBoxInfo
GetDlgItem
DispatchMessageA
GetDC
RedrawWindow
DialogBoxParamA
EndDialog
GetIconInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

DrawThemeIcon
GetThemeColor
EnableTheming
CloseThemeData
GetThemeMetric

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ