a6b7c39e3d12c037635c1734238b22f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6b7c39e3d12c037635c1734238b22f1_JaffaCakes118
Size

340KB
MD5

a6b7c39e3d12c037635c1734238b22f1
SHA1

c65405cee924cfeac853b50f9a01b291db22a874
SHA256

377d74295fe26c2a574fc7423f0f9bb1ef4430db21533f7e99bd957bce589716
SHA512

44888b730596c20d92c14625a0bd929fb4d80d8e9c5f6cac5580d6fc91a534c9b825873be97cde89482c95dec0f8e26c4af0e6a49c2d0e9ca6f9dd66daa14168
SSDEEP

6144:C0WGkkqpoaty48qJlyZkXomSe3orMqBh6U+oMD4qTb6Ohn1b8EtbGQl:C0WGBV+yvJ/FmBM2dhXGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6b7c39e3d12c037635c1734238b22f1_JaffaCakes118

Files

a6b7c39e3d12c037635c1734238b22f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

436dbe130fae27b37bbf2649d0e4001d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
lstrlenA
GetConsoleCP
CreateEventA
CreateFileMappingA
GetModuleHandleA
IsDebuggerPresent
GetStdHandle
FindClose
FreeEnvironmentStringsA
GlobalLock
CloseHandle
HeapCreate
CreateFileA
GetACP
LocalFree
GetLastError
IsBadReadPtr
GetPrivateProfileIntA

user32

GetDlgItemTextA
GetDlgItem
GetIconInfo
DispatchMessageA
GetMessageA
SetFocus
RedrawWindow
IsWindow
GetDC
CheckMenuItem
GetListBoxInfo
EndDialog
DialogBoxParamA
DrawIconEx

uxtheme

CloseThemeData
EnableTheming
DrawThemeIcon
GetThemeMetric
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ