a339ea4f91ca91d010072946b0fd87b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a339ea4f91ca91d010072946b0fd87b7_JaffaCakes118
Size

697KB
MD5

a339ea4f91ca91d010072946b0fd87b7
SHA1

4a1446ee80d757c74feae36cbc02e7979a443155
SHA256

47b243fb19297a45fd11f4f40c657ecf707ea2f8d526e8cbad095ae14396ac69
SHA512

8b1d38257a478c01fec31279010d73c133b53b5d1a560ec794cf7e7ffd466ef44b8b54178b23e75230ab19c514da8ba21c5ac799f86cd056de74aed0dc5a9f0e
SSDEEP

12288:1yhwrzlx9k7erU9XRohrq+PQffAqHpJXjDumdVxrwCdjPHqSTwUHpdC8ZCzP7W:1rrzbCCr+RoJIfffXjRJ8CdKCkX7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a339ea4f91ca91d010072946b0fd87b7_JaffaCakes118

Files

a339ea4f91ca91d010072946b0fd87b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8617b8afe5cc76811e176b3d5a99280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
LoadLibraryExW
GetACP
lstrlenA
HeapCreate
GlobalUnlock
GetLastError
FindClose
CreateFileMappingA
CreateFileA
LocalFree
TlsGetValue
CloseHandle
CreateMutexA
GetModuleHandleA
FindAtomA
ExitProcess
SetupComm
GlobalLock
FreeEnvironmentStringsA

user32

IsWindow
DispatchMessageA
GetIconInfo
CopyRect
DrawMenuBar
FillRect
GetFocus
DefWindowProcW
GetDlgItem
CheckRadioButton
DrawEdge
CallWindowProcA
GetDC
MessageBoxA

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeRect
GetThemeSysInt
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ