bc42869fcc57e2b6056a8d2ca2aeffcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc42869fcc57e2b6056a8d2ca2aeffcd_JaffaCakes118
Size

352KB
MD5

bc42869fcc57e2b6056a8d2ca2aeffcd
SHA1

2b8e324348d428f52c4cdba4a7721269b69a5d2e
SHA256

71600cb4ce34cf8ee897f3cd0e4ae3dcc7e1df18d2a0d2585e023df27a0ed814
SHA512

d6706c1fcdd96bf406685f3cd0d2e7793aa53f75d0fa1be467ff024ad5bf51b103d7e10e3e4389d5029dc5c18e9841e01cfc1390665af1437414311eecd08da4
SSDEEP

6144:9mNC0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nO9qxzSiUY:9kC08N5qAWgko8wR54aN7mwsSGqx26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc42869fcc57e2b6056a8d2ca2aeffcd_JaffaCakes118

Files

bc42869fcc57e2b6056a8d2ca2aeffcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a640f0978f410e29cc3e27db8e3151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
OpenMutexA
FreeConsole
GetACP
GetConsoleTitleW
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
OpenMutexA
GetModuleHandleA
LocalFlags
LoadLibraryExW

user32

GetKeyState
GetSubMenu
ClipCursor
GetParent
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA

uxtheme

EnableTheming
CloseThemeData
GetCurrentThemeName
DrawThemeText
DrawThemeBackground

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ