d24a6a14a23dadee03b3d73de0d59223_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d24a6a14a23dadee03b3d73de0d59223_JaffaCakes118
Size

342KB
MD5

d24a6a14a23dadee03b3d73de0d59223
SHA1

bd2513c6b318c5cea22a7c716dcebb94474e6485
SHA256

dac43be1fce17b33fe8f581c8e5f65483faee324832f8c38e12439fb5d5b2775
SHA512

89bbe244b280d31de3a17a8931b03baf6a163f7457e4711b91901c33dd9b06b3f3945993c946308b60d91702ecf270ed2be5fa76a4b9eb6c0846f1874673c9f1
SSDEEP

6144:mvtb2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX6GWxwon:mkyBe2Y0+iiZpJNANCFRBGGcl6G4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d24a6a14a23dadee03b3d73de0d59223_JaffaCakes118

Files

d24a6a14a23dadee03b3d73de0d59223_JaffaCakes118
.exe windows:4 windows x86 arch:x86

917c6613e61498a3ea8a3f3c4402735a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetLastError
IsDebuggerPresent
lstrlenA
CloseHandle
GetModuleHandleA
CreateEventA
CreateFileMappingA
GlobalLock
CreateFileA
IsBadReadPtr
HeapCreate
LocalFree
GetStdHandle
FindClose
LoadLibraryExA
FreeEnvironmentStringsA
GlobalUnlock
GetConsoleCP
GetACP

user32

CheckMenuItem
RedrawWindow
GetMessageA
GetIconInfo
EndDialog
SetFocus
GetDlgItem
DialogBoxParamA
GetDC
GetListBoxInfo
DispatchMessageA
IsWindow
GetDlgItemTextA
DrawIconEx

uxtheme

DrawThemeIcon
CloseThemeData
GetThemeMetric
EnableTheming
GetThemeColor

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ