b897eac1580bb5bd4190a85f97b26331_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b897eac1580bb5bd4190a85f97b26331_JaffaCakes118
Size

56KB
MD5

b897eac1580bb5bd4190a85f97b26331
SHA1

d9b410a63a77fa3cb441a270dd586bbfadb74041
SHA256

5a87f1c5407e1a44fc6e44ace291abccf860461cdc375d9b6f1f4df18875523b
SHA512

dba2e5e7174202a0696de896636b72204c6fb8d86fd59840e560ed92943ff5433b4bb0176995ff1cc622190f0d3021d7e237da1cd0d7cc92a27d84790a1231d5
SSDEEP

1536:1yVEOBPYNd3NXvXtkyZH0Sx9uGdPowkpfAHoKAOG42qWp:owtkW0OpwxlAm42qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b897eac1580bb5bd4190a85f97b26331_JaffaCakes118

Files

b897eac1580bb5bd4190a85f97b26331_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1c0e5f11dbe3719e12265883ac6eb49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetACP
GetModuleHandleA
HeapCreate
CloseHandle
lstrlenA
FindClose
GetConsoleCP
IsDebuggerPresent
IsBadReadPtr
CreateFileA
GetLastError
CreateEventA
LocalFree
GlobalUnlock
LoadLibraryExA
GetPrivateProfileIntA
GlobalLock
GetStdHandle
CreateFileMappingA

user32

GetIconInfo
IsWindow
CheckMenuItem
EndDialog
GetDC
SetFocus
GetDlgItemTextA
GetDlgItem
GetListBoxInfo
DispatchMessageA
GetMessageA
RedrawWindow
DialogBoxParamA
DrawIconEx

uxtheme

DrawThemeIcon
CloseThemeData
EnableTheming
GetThemeColor
GetThemeMetric

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ