a493c20aaa4d0a66e1d3d17f69db239a_JaffaCakes118 | Triage

Sharing

General

Target

a493c20aaa4d0a66e1d3d17f69db239a_JaffaCakes118
Size

57KB
MD5

a493c20aaa4d0a66e1d3d17f69db239a
SHA1

556ab3b5e05ead237f0ff1941f9c2bad6e130387
SHA256

bcff42ef9684e49ec03a7fccfc9ba79f972e295573bc9773cb2bf7198bc34dda
SHA512

a0ad244b0bd42a75487b293dcb6217a3c9a00f33e6923db68c57892de23d205476db47492deea9896c35e3fc6c854b67beb49787de4c6fe8aa915bcbad353df0
SSDEEP

768:9HkycbTtl8Nd3NXvyk+8h5kTr37VXeiZwq5v0XTm0cXqfkfb/TxH8E0pCpb/f:F6INd3NXvXtkwiZ5WTyafub/TxHTd/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a493c20aaa4d0a66e1d3d17f69db239a_JaffaCakes118

Files

a493c20aaa4d0a66e1d3d17f69db239a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02ca832dfbd301b275a12f08698f4a32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindClose
IsBadReadPtr
GlobalLock
LoadLibraryExA
CreateFileA
FreeEnvironmentStringsA
GetConsoleCP
CloseHandle
IsDebuggerPresent
LocalFree
LocalUnlock
GetModuleHandleA
GetStdHandle
GetFullPathNameA
GetLastError
lstrlenW
CreateFileMappingA
GetACP
CreateEventA

user32

EndDialog
GetMessageA
PostMessageA
GetIconInfo
CheckMenuItem
GetDlgItemTextA
SetFocus
DispatchMessageA
RedrawWindow
GetDC
GetDlgItem
ScrollWindow
IsWindow
DrawIconEx

uxtheme

GetThemeMetric
GetThemeColor
CloseThemeData
EnableTheming
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ