b8a65947f0d3ca61c199a3e9c6af1d55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8a65947f0d3ca61c199a3e9c6af1d55_JaffaCakes118
Size

342KB
MD5

b8a65947f0d3ca61c199a3e9c6af1d55
SHA1

82f06f3ee80f2fab8b83b4cb43da47d4ae33740c
SHA256

91a13d82c842c2b790a1ecc263ba84a9bc478993c60122e394267b198524b25b
SHA512

89415f32ca053fb11156ec354e764fd5743f3c3792e6c38cf67cb1c99884d4a26fff8c5e77a5d3e6baa44b8c9655fc7877b1ac9565dfaeb0a7c4bdd4877213c6
SSDEEP

6144:wbtTYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/grUuFOT6:mYvDsakbClM2pxYB3CuM/x0OW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a65947f0d3ca61c199a3e9c6af1d55_JaffaCakes118

Files

b8a65947f0d3ca61c199a3e9c6af1d55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c04166223863d9f96694de9b06be973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
HeapCreate
CloseHandle
LocalFree
LoadLibraryExA
GetModuleHandleA
IsDebuggerPresent
GetConsoleCP
CreateMailslotA
IsBadReadPtr
CreateFileMappingA
GetStdHandle
GetACP
CreateFileA
GetLastError
CreateEventA
GlobalLock
lstrlenA
GlobalUnlock
FreeEnvironmentStringsA

user32

GetDlgItemTextA
GetListBoxInfo
DialogBoxParamA
IsMenu
GetIconInfo
DispatchMessageA
GetMessageA
SetFocus
RedrawWindow
EndDialog
CheckMenuItem
GetDC
GetDlgItem
DrawIconEx

uxtheme

DrawThemeIcon
CloseThemeData
GetThemeMetric
EnableTheming
GetThemeColor

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ