6eea4c495ffd4b2bdf135d8819a3be2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eea4c495ffd4b2bdf135d8819a3be2e_JaffaCakes118
Size

341KB
MD5

6eea4c495ffd4b2bdf135d8819a3be2e
SHA1

d9766dbbb29652b0e9e3c8e6191e09d5ae6601f5
SHA256

83ae6a345ae3bd8a792b5a69ddc16d148fe024794cf322a097f1899336552598
SHA512

d68866f18071271c777b758f00d7db2e52bb1ba494a84a79d6c6d9d97641084c7b2f326eed9902564fad968a4af5cb2a29d35c05e8bc78a55bffa210e6038844
SSDEEP

6144:sLgVzUE0N9vbMjCrRRJA89PEipBB13C2lUOKOUFfH5Px3OaXereO079oo5occvfg:5VzUEUYOrRE89Phpx0JOKX3tg079oo5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eea4c495ffd4b2bdf135d8819a3be2e_JaffaCakes118

Files

6eea4c495ffd4b2bdf135d8819a3be2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbb4bb32e44f11a08b6baa4fcdd47424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
CreateFileA
LocalUnlock
LoadLibraryExA
GlobalLock
CreateEventA
GetPrivateProfileIntA
GetModuleHandleA
GetACP
GetLastError
GetConsoleCP
CreateFileMappingA
FindClose
HeapCreate
IsBadReadPtr
FreeEnvironmentStringsA
IsDebuggerPresent
CloseHandle
LocalFree
GetStdHandle

user32

GetMessageA
DispatchMessageA
SetFocus
IsWindow
GetDC
GetDlgItemTextA
GetIconInfo
CheckMenuItem
GetListBoxInfo
GetDlgItem
DialogBoxParamA
RedrawWindow
EndDialog
DrawIconEx

uxtheme

DrawThemeIcon
GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ