970c34ba97ead007392e913e107845f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970c34ba97ead007392e913e107845f2_JaffaCakes118
Size

342KB
MD5

970c34ba97ead007392e913e107845f2
SHA1

e1e3338e1e092b256a8a46ae56ce07aab2c7e91d
SHA256

34bd78e68d614610bdfd557d4471254307c7cde4399a67d53f62263deb070f12
SHA512

d2c626a85da6e71b875cbcbf04da80974f25d77d9dd809a5da938e8d8c1d874b53f68df8e6e44531360c72338c07c887886c7280d71c80a22586262e51d5d710
SSDEEP

6144:i/sF0LrHZhF68+qKA+KN4MpkdTjq2Fn7/EvP28mDCsPPTEp0fFvl:i/xHnp+RKzkdCantCsTEpKF9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970c34ba97ead007392e913e107845f2_JaffaCakes118

Files

970c34ba97ead007392e913e107845f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07bcd4276f792615fc2529dce764e220

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GlobalLock
GetFullPathNameA
lstrlenW
CloseHandle
GetStdHandle
CreateFileMappingA
FreeEnvironmentStringsA
IsBadReadPtr
LoadLibraryExA
GetACP
HeapCreate
IsDebuggerPresent
GetLastError
LocalUnlock
CreateFileA
FindClose
CreateEventA
GetConsoleCP
GetModuleHandleA

user32

CheckMenuItem
GetDC
GetDlgItemTextA
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
ScrollWindow
RedrawWindow
EndDialog
GetIconInfo
PostMessageA
GetMessageA
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ