ae4d8b98328fdac32dc43778d797065c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae4d8b98328fdac32dc43778d797065c_JaffaCakes118
Size

342KB
MD5

ae4d8b98328fdac32dc43778d797065c
SHA1

a931f5838ee0e5d9c8ca5e2cc43f532d55e7e798
SHA256

69d5db105ff5336551a1cf5a25aa6fa75ae1fe167d812d468f0ceb628fb56a20
SHA512

b3b5a2b7be28c0c08231557f1d6d2889831a87312c46a3bdd264c9aba1890286ee2b2f41c0a6aa347cae34f4c6fefedc50348164d63d3c8e6b16e8159eee393c
SSDEEP

6144:cetLtvYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvNP5Ch+Ic:LfYvDsakbClM2pxYB3CuM/x4NPcUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae4d8b98328fdac32dc43778d797065c_JaffaCakes118

Files

ae4d8b98328fdac32dc43778d797065c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f6511425028125f051dfbc1973eebe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
CreateMailslotA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsMenu
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ