ae1726026a0196d09c5adc93da977ec1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae1726026a0196d09c5adc93da977ec1_JaffaCakes118
Size

815KB
MD5

ae1726026a0196d09c5adc93da977ec1
SHA1

7795ae4a71b4869ed01743ea161cfa48affcf79f
SHA256

f5a64f8df67f230971c7bddef5977ea68474af9b72227119176968e72335e032
SHA512

00bccb31922a364f4c4fcfb516e0292c64ccf4d61a6b592ca8e18098a0a5a66732a21cdc24e580e2f09d12d4a0f35cf2c376fc4781c616bca94a42dcb0299934
SSDEEP

24576:5SsFMPQt5RXv0Nsb99gnQs8RWqyxUtk/s1r:dFFXRXv0Nsb99IdFLWq/s1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae1726026a0196d09c5adc93da977ec1_JaffaCakes118

Files

ae1726026a0196d09c5adc93da977ec1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

151e26e8391b99986d9568b6583c4eec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FreeEnvironmentStringsA
GetLastError
CloseHandle
GetACP
Sleep
CreateMutexA
GetModuleHandleA
LocalFree
SetupComm
CreateFileMappingA
TlsGetValue
HeapCreate
FindAtomA
CreateFileA
GlobalUnlock
LoadLibraryExW
ExitProcess
GlobalLock
lstrlenA

user32

CheckRadioButton
DefWindowProcW
DrawEdge
CopyRect
GetDC
GetIconInfo
GetDlgItem
CallWindowProcA
DispatchMessageA
GetFocus
DrawMenuBar
FillRect
IsWindow
MessageBoxA

uxtheme

DrawThemeEdge
DrawThemeIcon
DrawThemeText
GetThemeRect
GetThemeSysInt

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ