a8dec8745fdd51e37b6c0a4cd8f15634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8dec8745fdd51e37b6c0a4cd8f15634_JaffaCakes118
Size

393KB
MD5

a8dec8745fdd51e37b6c0a4cd8f15634
SHA1

0ed84ae04cf18d10f2ac5f6c9c758e6cf3f3d540
SHA256

f0b0b50439a32901a21130b4907c649ded66d2bb95e84cd7b920e4cc470c591c
SHA512

de2d2d5bd0edc16ce0e057aa4b43f078c5eac65eb2f9f75d1caf825a5aa9f345fae1df7f1c9f2f11efd409e87c8b3cc820931eae521ebb0f53d8035a6be37e4f
SSDEEP

12288:8yJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDD9UM:8yJOfWwWGzUrbOYDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8dec8745fdd51e37b6c0a4cd8f15634_JaffaCakes118

Files

a8dec8745fdd51e37b6c0a4cd8f15634_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8aca73ea9a78604d3fce082789ac971

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FreeEnvironmentStringsA
GetACP
LocalFree
CreateFileA
FindClose
GetModuleHandleA
MapViewOfFile
SetupComm
HeapDestroy
CreateMutexA
GlobalUnlock
lstrlenA
HeapCreate
FindAtomA
ExitProcess
GetLastError
LoadLibraryExW
Sleep
CloseHandle

user32

DispatchMessageA
FillRect
GetIconInfo
GetDlgItem
DrawMenuBar
IsWindow
GetFocus
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CopyRect
CallWindowProcA
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeEdge
GetThemeRect
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ