c25e149b6ccc97dd6f46d848dd565933_JaffaCakes118 | Triage

Sharing

General

Target

c25e149b6ccc97dd6f46d848dd565933_JaffaCakes118
Size

340KB
MD5

c25e149b6ccc97dd6f46d848dd565933
SHA1

b1c3acceeb8d4943b076e4bc2de35602594459f2
SHA256

a50e330055fa31b4c20ab1ebccaf023e8365528beaa6d879a51c23ed9ddbabfa
SHA512

74d2a281fa6af8cca386b5736d77a7a408f5f3a69527aca0637ff3a075fb4ffaceef74541d6ee25f6a9c5e724e2f8e24f69de15352858c552cdf291bca38e838
SSDEEP

6144:w5tHzLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/sPJ6:EFhgh2R8O+yFqpLh+qJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c25e149b6ccc97dd6f46d848dd565933_JaffaCakes118

Files

c25e149b6ccc97dd6f46d848dd565933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

950f6ecc7e1689d59b0685fdf36c7e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
CreateFileA
IsDebuggerPresent
IsBadReadPtr
FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalLock
GetACP
CreateEventA
GetModuleHandleA
GetLastError
LocalFree
CreateWaitableTimerA
LoadLibraryExA
HeapCreate
CloseHandle
MapViewOfFile
GetStdHandle

user32

CreateWindowExA
SetFocus
GetDlgItemTextA
IsMenu
ClipCursor
GetSubMenu
GetDlgItem
GetMessageA
EndDialog
DialogBoxParamA
RedrawWindow
CheckMenuItem
GetParent
DrawIconEx

apphelp

ApphelpShowDialog
SdbCloseDatabase
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ