dee78d643c0ae15a24caf46ba48e5c3e_JaffaCakes118 | Triage

Sharing

General

Target

dee78d643c0ae15a24caf46ba48e5c3e_JaffaCakes118
Size

340KB
MD5

dee78d643c0ae15a24caf46ba48e5c3e
SHA1

dd3a5a43ffbbb7eb949817673bc60c88fc4e1deb
SHA256

e246aab0d841268caa6daebcd41d0651a68b1a43a40bc0ee7974973f97e03273
SHA512

6548861486dcd83fcbc6a4986cee941b48774f64dae4af96ac3e37513dd0406fe81f716b8618d6da5ceb52bf01b785abbb29b4717dc72d64fbed0f1edbdc2850
SSDEEP

6144:DhJihOYCkrHFX/0uT0QVdHuOYRgYZAnXY9lUKi0SUVmbY/l3nw:NIhOYVHR8M0u4OYuYAXm78UVmbU3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dee78d643c0ae15a24caf46ba48e5c3e_JaffaCakes118

Files

dee78d643c0ae15a24caf46ba48e5c3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

805d3df4bbba2f807d9e0cd448394715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CloseHandle
IsBadReadPtr
LocalFree
GlobalLock
CreateFileA
GetConsoleCP
FreeEnvironmentStringsA
GetACP
GetStdHandle
GlobalUnlock
LoadLibraryExA
CreateEventA
GetModuleHandleA
CreateMailslotW
IsDebuggerPresent
GetLastError
lstrlenA
HeapCreate
FindClose

user32

GetDlgItem
GetListBoxInfo
GetDlgItemTextA
RedrawWindow
GetMessageA
EndDialog
GetIconInfo
SetFocus
DispatchMessageA
GetDC
DialogBoxParamA
CheckMenuItem
IsWindow
DrawIconEx

uxtheme

GetThemeColor
GetThemeMetric
DrawThemeIcon
CloseThemeData
EnableTheming

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ