9733c33c258ead3874c9d8300ab91831_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9733c33c258ead3874c9d8300ab91831_JaffaCakes118
Size

342KB
MD5

9733c33c258ead3874c9d8300ab91831
SHA1

6573e1281a5085317139754735e7d563e89d567e
SHA256

432a176138d022de39ab33fc0294ec3d172a272caf2874b8733d8efa46b97776
SHA512

3f1d14d0fd717692a4d8cb5d2156fa9e98d9901f9ed8eefd4703c74b994691ed633c27de19ec5d3fbe84ce236edc0df919937df24b82fcb108fc3c7413717069
SSDEEP

6144:EetztvYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvNP5Ch+Ic:zfYvDsakbClM2pxYB3CuM/x4NPcUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9733c33c258ead3874c9d8300ab91831_JaffaCakes118

Files

9733c33c258ead3874c9d8300ab91831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f6511425028125f051dfbc1973eebe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
CreateMailslotA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsMenu
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ