7004e4cfb0c7a0281155aa7472d31265_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7004e4cfb0c7a0281155aa7472d31265_JaffaCakes118
Size

340KB
MD5

7004e4cfb0c7a0281155aa7472d31265
SHA1

2b16cefa9afe9bcc6c960177cbcb325ab5b55ec5
SHA256

da0151031a4efa7c051c7ec996bd44593fe01a3ec1b7823d1b65c9958e851ac3
SHA512

23924038d53ee60eaff9299ad84ab87627d10989a06cd30af075c2bc66267f993301e838299ed4e974a7a5dc2485084737210616369b72f5c0d727f251c86100
SSDEEP

6144:wldunZBahFSyTNFbxLQJUned3SO1d6Zku/JGOsGY7PV+ESyGK2/:wlduZBQFl3W3JAqu/JGOsGeoKL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7004e4cfb0c7a0281155aa7472d31265_JaffaCakes118

Files

7004e4cfb0c7a0281155aa7472d31265_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60bff30c61f11e18cf451dcd530e7603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetPrivateProfileIntA
GetModuleHandleA
GetStdHandle
IsDebuggerPresent
CreateEventA
LocalFree
GetConsoleCP
FindClose
lstrlenW
GlobalLock
FreeEnvironmentStringsA
CreateFileMappingA
GetLastError
GetACP
CreateFileA
IsBadReadPtr
HeapCreate
LoadLibraryExA

user32

EndDialog
DialogBoxParamA
GetDlgItemTextA
CheckMenuItem
GetListBoxInfo
RedrawWindow
SetFocus
GetIconInfo
DispatchMessageA
GetDlgItem
GetMessageA
GetDC
IsWindow
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ