bd809740718769115861740c1afd856f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd809740718769115861740c1afd856f_JaffaCakes118
Size

393KB
MD5

bd809740718769115861740c1afd856f
SHA1

409511da8de8e4cea13d5b1f0dd76fbe08790a40
SHA256

f4f6da8427d9ebaab2a2ee21a8a8775c8d094d8b1a8e9b010af31cf721bb1b61
SHA512

de3cc09bb804bf562b911253d5f476639c7f0cacb6edbc2f0fb3121d23686d4519de72a69ef23fa132452ccc76a1f60063494a73d22cf36e5eef04f5898915ca
SSDEEP

12288:GyJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDD9UM:GyJOfWwWGzUrbOYDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd809740718769115861740c1afd856f_JaffaCakes118

Files

bd809740718769115861740c1afd856f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8aca73ea9a78604d3fce082789ac971

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FreeEnvironmentStringsA
GetACP
LocalFree
CreateFileA
FindClose
GetModuleHandleA
MapViewOfFile
SetupComm
HeapDestroy
CreateMutexA
GlobalUnlock
lstrlenA
HeapCreate
FindAtomA
ExitProcess
GetLastError
LoadLibraryExW
Sleep
CloseHandle

user32

DispatchMessageA
FillRect
GetIconInfo
GetDlgItem
DrawMenuBar
IsWindow
GetFocus
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CopyRect
CallWindowProcA
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeEdge
GetThemeRect
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ