c91c15d7630f105ac57369b52eb9ac8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c91c15d7630f105ac57369b52eb9ac8b_JaffaCakes118
Size

815KB
MD5

c91c15d7630f105ac57369b52eb9ac8b
SHA1

f6c24ca76324c59479fb2671aa5ac82f7473af22
SHA256

b09082045ff8f4595401537ec0f59ef3ca051bd5f31f847d6fbf60c456ac6757
SHA512

3584adf1c5507951c286b340c16e7c188bf2a9905add834673c8e2826523222a107691f74329ae256739274f59a7351925e3f8fcdc11112c9b0696f42ea10f21
SSDEEP

24576:ZtsDbLJuZYmeOeNacSEwTdZfjAQvQ61BTjc:wXLJuamef4njAQFtc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c91c15d7630f105ac57369b52eb9ac8b_JaffaCakes118

Files

c91c15d7630f105ac57369b52eb9ac8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

633fbbe90dbffdbfbcd10ef9f5f67167

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
HeapCreate
lstrlenW
CreateFileMappingA
FindClose
FreeEnvironmentStringsA
IsDebuggerPresent
GetACP
GetConsoleCP
GetFullPathNameA
CreateFileA
CloseHandle
LoadLibraryExA
GetStdHandle
IsBadReadPtr
LocalFree
GetLastError
GlobalLock
CreateEventA

user32

GetDC
GetMessageA
CreateDialogParamA
IsWindow
GetDlgItem
GetIconInfo
SetFocus
ScrollWindow
EndDialog
PostMessageA
DefWindowProcA
DispatchMessageA
EmptyClipboard
DrawIconEx

uxtheme

GetThemeMetric
CloseThemeData
EnableTheming
DrawThemeIcon
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ