6fdfc6af7bbe403af70ce0e68fc3751d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdfc6af7bbe403af70ce0e68fc3751d_JaffaCakes118
Size

815KB
MD5

6fdfc6af7bbe403af70ce0e68fc3751d
SHA1

b65557fabfffd3d2f95f5a973e32b0119eb364db
SHA256

39ace8d5bafff6d026d2081c9d3d1930c5b59199abd23abf4c6461c07e35ed41
SHA512

1c9eba246a1c83c1d5f3a33943cf728db7e0f169799ddde81d0e915535a1b2d4fb5cf043d2287fa145519e32d93adc1aacef8e699bd6479b12ec24dcce2139ef
SSDEEP

12288:eOhkn72SZWFNcJ7z1dR1e+K8W+jkBhEWW299paX4V/ZCm04VY1ynglaQTsB+G1fw:L472SZWktjXHkbWG2Gh57Y1qgMB+Io

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdfc6af7bbe403af70ce0e68fc3751d_JaffaCakes118

Files

6fdfc6af7bbe403af70ce0e68fc3751d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06b0b0724a9acd6752a2a482f4f585ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
MapViewOfFile
GlobalUnlock
LoadLibraryExW
FreeEnvironmentStringsA
SetupComm
CreateFileA
ExitProcess
GetModuleHandleA
CreateMutexA
FindClose
HeapCreate
FindAtomA
LocalFree
GetACP
SetLastError
UnmapViewOfFile
lstrlenA
TlsGetValue
GetLastError

user32

CopyRect
DrawEdge
DefWindowProcW
IsWindow
CallWindowProcA
GetIconInfo
GetDlgItem
CheckRadioButton
FillRect
DrawMenuBar
GetDC
DispatchMessageA
GetFocus
MessageBoxA

uxtheme

DrawThemeText
GetThemeRect
DrawThemeIcon
DrawThemeEdge
GetThemeSysInt

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ