880b2bf34fa85a98a131f89610f616ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880b2bf34fa85a98a131f89610f616ad_JaffaCakes118
Size

815KB
MD5

880b2bf34fa85a98a131f89610f616ad
SHA1

869d049d22667f45d24c2135c7c3340031387874
SHA256

db87bb3b94b62d8cb2b722bd912433cac07ab79b03c95da94eec6da09295ceec
SHA512

6148e2d17decf05810bcbf805fa542024bbfca57c0a6fc0a465f1f3e97148fcb833b092fd150f54d513a074bd67e47a3621f66f5ca716b1e1b0d27db0075498a
SSDEEP

24576:PGPT4uPIKsQIpxlQyksmIE044wRsPFAfgdBrM:K3wKsPlBmIH5wRP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880b2bf34fa85a98a131f89610f616ad_JaffaCakes118

Files

880b2bf34fa85a98a131f89610f616ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7faeedb6e1d1d3412002e6ef075824da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetModuleHandleA
CreateEventA
CreateFileMappingA
LocalUnlock
CloseHandle
lstrlenW
FreeEnvironmentStringsA
GetACP
GetStdHandle
GetLastError
FindClose
GlobalLock
LoadLibraryExA
IsBadReadPtr
LocalFree
IsDebuggerPresent
CreateFileA
HeapCreate
GetFullPathNameA

user32

DispatchMessageA
SetFocus
GetDC
GetMessageA
GetDlgItemTextA
PostMessageA
GetIconInfo
GetDlgItem
ScrollWindow
IsWindow
CheckMenuItem
EndDialog
RedrawWindow
DrawIconEx

uxtheme

CloseThemeData
GetThemeMetric
EnableTheming
DrawThemeIcon
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ