d5c236e95e8c309619b7a4b7004b9bb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c236e95e8c309619b7a4b7004b9bb4_JaffaCakes118
Size

342KB
MD5

d5c236e95e8c309619b7a4b7004b9bb4
SHA1

d9faee0746110de666cbfd4313195d83be9d2e3b
SHA256

74defc8d16390682db1069256d14dcddad87daa84ebc460ab6dc251c3e4e90e3
SHA512

1cf3415032ba8e8752f207054266efeb94a3cef2c541898ed62dd659c8882dcbcc8aa7924a62ca544050c35763f1d0f008e672e2e2a0ae7399139547e987a597
SSDEEP

6144:wBtIYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gYHf9:HYvDsakbClM2pxYB3CuM/xV/9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c236e95e8c309619b7a4b7004b9bb4_JaffaCakes118

Files

d5c236e95e8c309619b7a4b7004b9bb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d4acc2f2a808ade4e86efa0e1417585

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetStdHandle
GetLastError
CreateMailslotA
GetACP
CloseHandle
GlobalLock
CreateEventA
LocalFree
FreeEnvironmentStringsA
GlobalUnlock
CreateFileA
IsDebuggerPresent
FindClose
IsBadReadPtr
HeapCreate
lstrlenA
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA

user32

GetMessageA
SetFocus
EndDialog
DialogBoxParamA
IsMenu
CheckMenuItem
DispatchMessageA
GetIconInfo
GetDlgItemTextA
RedrawWindow
GetDlgItem
GetListBoxInfo
GetDC
DrawIconEx

uxtheme

GetThemeMetric
EnableTheming
DrawThemeIcon
CloseThemeData
GetThemeColor

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ