6417610fb18b6b15da8c73319fae53f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6417610fb18b6b15da8c73319fae53f6_JaffaCakes118
Size

340KB
MD5

6417610fb18b6b15da8c73319fae53f6
SHA1

81b6f61c682fc0313f8c9723f50503afbdb02948
SHA256

7f75d8734c5814384e62d404a74f26be01d70a9bb554e7763c2d9cab3b859848
SHA512

f5d0c63192aa2966607cb4c4c66f52b13ad8ce0ddaf929c6b7de52f6e6514c60b683aed7448c4daabbb9903a5d55ab73a1064fe627aff91b5811be3e99e60823
SSDEEP

6144:jrB8N/FJMWXHWeYV3t3R5yPDxcDRlDAcnRNLbypAqntCeeWYlmfJS:jrMFJMVeYV3tWidldRN/yHtReWpI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6417610fb18b6b15da8c73319fae53f6_JaffaCakes118

Files

6417610fb18b6b15da8c73319fae53f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae225c7d1c306e93b494545ceca5b9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
FindClose
CreateFileA
IsDebuggerPresent
CreateFileMappingA
IsBadReadPtr
CloseHandle
GlobalUnlock
GlobalLock
GetACP
LoadLibraryExA
CreateMailslotA
FreeEnvironmentStringsA
LocalFree
GetConsoleCP
CreateEventA
lstrlenA
GetStdHandle
GetLastError

user32

DialogBoxParamA
IsMenu
CheckMenuItem
EndDialog
RedrawWindow
DispatchMessageA
GetDlgItemTextA
SetFocus
GetDC
GetListBoxInfo
GetDlgItem
GetMessageA
GetIconInfo
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
DrawThemeIcon
GetThemeColor

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ