6f9726fa6d06f9df7a4dbf0b84412db5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f9726fa6d06f9df7a4dbf0b84412db5_JaffaCakes118
Size

342KB
MD5

6f9726fa6d06f9df7a4dbf0b84412db5
SHA1

2cf521dec2ddbaedbc4c1485ffb333ab3282d9f1
SHA256

83796f880e9c619a5e16ffb9057a1d9d8a6650d3608315158b92a025dc2ce975
SHA512

946ecb2efba2f611f47c45db970290c3e5487f57d76d17974883aab1aca77a34f505b577b0dcbae4d64773d88f464a40cda14e8766e9f01d09b5601b6c099c97
SSDEEP

6144:jPt48YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gGFSZ3lpN:K8YvDsakbClM2pxYB3CuM/xLWlv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f9726fa6d06f9df7a4dbf0b84412db5_JaffaCakes118

Files

6f9726fa6d06f9df7a4dbf0b84412db5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fe65b99c3f070560baf1be82b524b47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetACP
lstrlenA
FreeEnvironmentStringsA
CreateMailslotA
CreateEventA
IsBadReadPtr
IsDebuggerPresent
GetLastError
CreateFileMappingA
GetStdHandle
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
CloseHandle
GetConsoleCP
LoadLibraryExA

user32

GetIconInfo
GetMessageA
EndDialog
GetListBoxInfo
DispatchMessageA
CheckMenuItem
GetDC
SetFocus
RedrawWindow
GetDlgItemTextA
DialogBoxParamA
IsMenu
GetDlgItem
DrawIconEx

uxtheme

EnableTheming
CloseThemeData
GetThemeColor
GetThemeMetric
DrawThemeIcon

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ