8ec6e61781856f0823568cdc3a2b7905_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ec6e61781856f0823568cdc3a2b7905_JaffaCakes118
Size

816KB
MD5

8ec6e61781856f0823568cdc3a2b7905
SHA1

296e6836e18be6ed3d185825e9b50d3c67f49f36
SHA256

cc6a7ca670ce47287bd102d574166d99eb535f89a396a306116b8b6bf7a1f5ec
SHA512

b78f71de434145bf738314462fbb0863d521608fa6eeffd7028efbb7b852fd381c36bd36dba640ab9f22e5884aac526b82d1f0153a2a91cdcac05734da82f28f
SSDEEP

12288:NVajeWsMvRh2M3I0rIyyYND/NXzBDxHqmogrmHiKlF3HjA14e+7VDhzM73buFeKX:3dnEa6DNFDgSroYuPZhgWFnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec6e61781856f0823568cdc3a2b7905_JaffaCakes118

Files

8ec6e61781856f0823568cdc3a2b7905_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e1576f654549cb9e1cd4466644d891c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
LocalFree
CreateFileMappingA
HeapCreate
IsDebuggerPresent
GetLastError
GetACP
GetModuleHandleA
LocalUnlock
lstrlenW
CreateEventA
IsBadReadPtr
GlobalLock
GetConsoleCP
CloseHandle
CreateFileA
LoadLibraryExA
FreeEnvironmentStringsA
FindClose
GetStdHandle

user32

IsWindow
GetDlgItem
GetIconInfo
GetDlgItemTextA
RedrawWindow
DispatchMessageA
GetDC
CheckMenuItem
ScrollWindow
PostMessageA
EndDialog
SetFocus
GetMessageA
DrawIconEx

uxtheme

EnableTheming
CloseThemeData
DrawThemeIcon
GetThemeMetric
GetThemeColor

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ