d00b0709d64e47045bf5b9af9e042688_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d00b0709d64e47045bf5b9af9e042688_JaffaCakes118
Size

341KB
MD5

d00b0709d64e47045bf5b9af9e042688
SHA1

31fb92bb4846f9e7b6a5539331bb7814235f4ea6
SHA256

2f9617549f440596b5f3545f3454cdbb70927839d3e91cbf76b0f4a939e5f38d
SHA512

7fa6bc3572a46b9ba2f53858bc53e7a71f5894bbf29a7e52ac24ba9b056ac395371e20f6a25852618a094859e230e1cc032a22dc6e6ab56f3522d747091c09f7
SSDEEP

6144:NIXjUkeru7bdTUeh9g8ufb7z7KNhUIZ6e8NqbVM7Yf6SpWCsvKTiTiKftm/YmflB:ujNeQbdT1h9ufHz7KNhPIqbS8DwCJTim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00b0709d64e47045bf5b9af9e042688_JaffaCakes118

Files

d00b0709d64e47045bf5b9af9e042688_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd9f3894213b4ad812220e362ee0421e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
CreateFileA
GlobalUnlock
LoadLibraryExA
GlobalLock
CreateEventA
GetPrivateProfileIntA
GetModuleHandleA
GetACP
GetLastError
GetConsoleCP
CreateFileMappingA
FindClose
HeapCreate
IsBadReadPtr
FreeEnvironmentStringsA
IsDebuggerPresent
CloseHandle
LocalFree
GetStdHandle

user32

GetMessageA
DispatchMessageA
SetFocus
IsWindow
GetDC
GetDlgItemTextA
GetIconInfo
CheckMenuItem
GetListBoxInfo
GetDlgItem
DialogBoxParamA
RedrawWindow
EndDialog
DrawIconEx

uxtheme

DrawThemeIcon
GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ