835bc709e8f2c0b155e7a5a7d10ec1fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

835bc709e8f2c0b155e7a5a7d10ec1fc_JaffaCakes118
Size

340KB
MD5

835bc709e8f2c0b155e7a5a7d10ec1fc
SHA1

f17d36db9d1d12a2f9ff0a1a7bec2f7b80ec7458
SHA256

6c348a714c6a07e2a3bfd38b661274e0fef1e7b6abec5d3b835099c5c02856c5
SHA512

4a521cd7f3ba12ed95ecc52a2107206b16071e55d6bf561f6d9431aba1b8175360a4a4e60627a123a9dc74f06e56c44f85beac829d2c2beca44215dc54a1f85d
SSDEEP

6144:+CH0zKWIWDjiTW+5VZopfYrf51IITBs2eAKxrgmNoUSpL0wWKQh0fFve:+HzLDjiK+3h1jBkAyHGUgFyKF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
835bc709e8f2c0b155e7a5a7d10ec1fc_JaffaCakes118

Files

835bc709e8f2c0b155e7a5a7d10ec1fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a67ccac90555988ed3096b4cdd1d36f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GlobalLock
GetPrivateProfileIntA
lstrlenW
CloseHandle
GetStdHandle
CreateFileMappingA
FreeEnvironmentStringsA
IsBadReadPtr
LoadLibraryExA
GetACP
HeapCreate
IsDebuggerPresent
GetLastError
GlobalUnlock
CreateFileA
FindClose
CreateEventA
GetConsoleCP
GetModuleHandleA

user32

CheckMenuItem
GetDC
GetDlgItemTextA
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
GetListBoxInfo
RedrawWindow
EndDialog
GetIconInfo
DialogBoxParamA
GetMessageA
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ