b90ebdea9eefb04b9d4bff254a0c8804_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b90ebdea9eefb04b9d4bff254a0c8804_JaffaCakes118
Size

342KB
MD5

b90ebdea9eefb04b9d4bff254a0c8804
SHA1

6d7afb7033ac718f9ba5c6de55df7e30f1c438e2
SHA256

6b3b0d642fcf4899ef62ed4313681ee672ff0095c507d2dc3576f2697f190dce
SHA512

935a3295e801d7dd1eaf6bfe2c7093f8d8b18332453ab7ca35d8ba1a1b5a832d9a18472831c44a88128de09c8c5ee6327a3ba78854369b7f085db7e403a6e1d1
SSDEEP

6144:ftW2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX670fFve:JyBe2Y0+iiZpJNANCFRBGGcl67KF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b90ebdea9eefb04b9d4bff254a0c8804_JaffaCakes118

Files

b90ebdea9eefb04b9d4bff254a0c8804_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4efa911c78a20c1d8b683b879b7e0a00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GlobalLock
GetPrivateProfileIntA
lstrlenA
CloseHandle
GetStdHandle
CreateFileMappingA
FreeEnvironmentStringsA
IsBadReadPtr
LoadLibraryExA
GetACP
HeapCreate
IsDebuggerPresent
GetLastError
GlobalUnlock
CreateFileA
FindClose
CreateEventA
GetConsoleCP
GetModuleHandleA

user32

CheckMenuItem
GetDC
GetDlgItemTextA
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
GetListBoxInfo
RedrawWindow
EndDialog
GetIconInfo
DialogBoxParamA
GetMessageA
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ