843dc560b1e7a5619c5d1bd84b0e6d00_JaffaCakes118 | Triage

Sharing

General

Target

843dc560b1e7a5619c5d1bd84b0e6d00_JaffaCakes118
Size

342KB
MD5

843dc560b1e7a5619c5d1bd84b0e6d00
SHA1

dc92fd750b4ab86a71769d9592b1c59a62d3a89d
SHA256

ce2ba4e7ac94c1cd0dd91a97aa3d7cf95daef79c36c094568e8475d0a0b54f97
SHA512

e7bb43eaa223c6efd319a624c449d9bb50832e97e706926a3913f8a628cb9214f3f903672e67c9365d24245d6650f76912b393d5c1413c0ad6cf24a8970c3324
SSDEEP

6144:detOtvYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvNP5Ch+Ic:8cYvDsakbClM2pxYB3CuM/x4NPcUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
843dc560b1e7a5619c5d1bd84b0e6d00_JaffaCakes118

Files

843dc560b1e7a5619c5d1bd84b0e6d00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f6511425028125f051dfbc1973eebe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
CreateMailslotA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsMenu
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ