9634af87b8e518e4c9c6049acca0ee52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9634af87b8e518e4c9c6049acca0ee52_JaffaCakes118
Size

384KB
MD5

9634af87b8e518e4c9c6049acca0ee52
SHA1

caec704f12781d9b94e7850d7820931473194985
SHA256

16e4040d147a87e0ab2056a8cb951cd6eac24d1c41c123eb5957f5e527b15d08
SHA512

a417f5b508f622262500dc0da8355b750eef783d11f5f5d7bc573ca6197947be0ea645966df2cab36617cc36517b4468720a79510e3c073ea64d1a4d7f1f8fb8
SSDEEP

6144:V2tLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:QzR5GdCs0O1BkBqwtjFc0fTjZOT59oz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9634af87b8e518e4c9c6049acca0ee52_JaffaCakes118

Files

9634af87b8e518e4c9c6049acca0ee52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faf57c3354f72d38913bc100499411dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
LocalUnlock
CreateFileA
DisconnectNamedPipe
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA

user32

DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
ScrollWindow
EmptyClipboard
GetDC
GetMessageA
PostMessageA
SetFocus
GetIconInfo
EndDialog
IsWindow
DrawIconEx

uxtheme

GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ