a988717000c5058ed73fa2844f6bbd0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a988717000c5058ed73fa2844f6bbd0e_JaffaCakes118
Size

384KB
MD5

a988717000c5058ed73fa2844f6bbd0e
SHA1

48219cee30abbef8be797a62720314d33905fcdf
SHA256

c114e4a67eeda553c630e91468c8de8ee96455ed7d517abef17d12e82efa53f6
SHA512

b8e5014db3085704b781eff739910eeca7097d196132d4fee1797c1020031d81754b770e294d5ea401d5d8ebfd295ebe4648fcf3958eca6b85552d0dcfa541cb
SSDEEP

12288:TR5GdCs0O1BkBqwtjFc0fTjZOT59ozIwxuq4wDKSBwA:adl31+qAjFVxIozvxuqFj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a988717000c5058ed73fa2844f6bbd0e_JaffaCakes118

Files

a988717000c5058ed73fa2844f6bbd0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

074259b55939ce8b0923d72e0820f2e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CloseHandle
GetModuleHandleA
lstrlenW
IsDebuggerPresent
GetConsoleCP
GetStdHandle
LocalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
GetFullPathNameA
GetACP

user32

PostMessageA
GetDlgItem
IsWindow
GetMessageA
DispatchMessageA
EmptyClipboard
DefWindowProcA
ScrollWindow
SetFocus
GetDC
EndDialog
CreateDialogParamA
GetIconInfo
DrawIconEx

uxtheme

EnableTheming
CloseThemeData
DrawThemeIcon
GetThemeMetric
GetThemeColor

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ