7642ebec932b2c6ed9624b9f09536b9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7642ebec932b2c6ed9624b9f09536b9e_JaffaCakes118
Size

340KB
MD5

7642ebec932b2c6ed9624b9f09536b9e
SHA1

daf1efc758bc381a2fe671af0829a200d29aac80
SHA256

2a23dee4f3782210d7a3fa6c8a0932cd734aa8261fa03e985b85e7c23d5c808b
SHA512

749c26828d37db46f6cf978dacc8977607da7242feb6a96aca46f421d3606abd579ca9264bdb4fc0c83adb7b3faf55c52a285b65a810319574058e8740e750df
SSDEEP

6144:fvVtZjLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/gL4iz:BFhgh2R8O+yFqpLh+hI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7642ebec932b2c6ed9624b9f09536b9e_JaffaCakes118

Files

7642ebec932b2c6ed9624b9f09536b9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45c1151b30dc644d7d4c64edd17ee07c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CreateWaitableTimerA
FindClose
IsBadReadPtr
LoadLibraryExA
GetConsoleCP
GetModuleHandleA
GetStdHandle
CreateFileA
LocalFree
MapViewOfFile
CloseHandle
GlobalLock
lstrlenA
IsDebuggerPresent
GetLastError
GlobalUnlock
GetACP
CreateEventA
FreeEnvironmentStringsA

user32

GetSubMenu
ClipCursor
SetFocus
GetParent
GetDlgItem
GetMessageA
RedrawWindow
EndDialog
GetDlgItemTextA
IsMenu
CreateWindowExA
DialogBoxParamA
CheckMenuItem
DrawIconEx

apphelp

SdbFindFirstTag
ApphelpShowDialog
ApphelpCheckRunApp
SdbCloseDatabase
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ