93c5c0b08ae5b4a6cb064e83969054c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93c5c0b08ae5b4a6cb064e83969054c7_JaffaCakes118
Size

815KB
MD5

93c5c0b08ae5b4a6cb064e83969054c7
SHA1

1a242a1b06d92d31316780857f7a04d168fb447d
SHA256

29fcb9badcb4e86802477f56bfae31cdb2f42508aa97f64f962e2446f6d4eb08
SHA512

c515ea86de63d644bb2f72a47b0df0528aa14fbe29b029df75de8e798819ea0f03c506bd2c1ec731d34611b91c8f9eb8b7ac96de2a3026d351e13ee0c9978a3c
SSDEEP

12288:JyMHrgX0Q/6/M6Bvz8z28OFjCG2WB0zU1t9l63lCbWfeORX0Y4pvdNEc2:JyMLo/6k7z28QB5D63kbWfeM0PCc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93c5c0b08ae5b4a6cb064e83969054c7_JaffaCakes118

Files

93c5c0b08ae5b4a6cb064e83969054c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef3b4cb5637a5987c5cdc4429db0d84e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetLastError
IsDebuggerPresent
GlobalLock
LocalFree
CloseHandle
CreateFileMappingA
CreateEventA
HeapCreate
LocalUnlock
FreeEnvironmentStringsA
GetPrivateProfileIntA
GetStdHandle
LoadLibraryExA
GetConsoleCP
FindClose
CreateFileA
GetModuleHandleA
GetACP

user32

GetDlgItemTextA
GetListBoxInfo
CheckMenuItem
GetDlgItem
DispatchMessageA
GetDC
GetIconInfo
EndDialog
DialogBoxParamA
SetFocus
GetMessageA
RedrawWindow
IsWindow
DrawIconEx

uxtheme

GetThemeMetric
DrawThemeIcon
CloseThemeData
EnableTheming
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ