e243596b4c545ba098112fa62a4f5aee_JaffaCakes118 | Triage

Sharing

General

Target

e243596b4c545ba098112fa62a4f5aee_JaffaCakes118
Size

815KB
MD5

e243596b4c545ba098112fa62a4f5aee
SHA1

1176373c3a662616b769bed92d589f7aaac48a56
SHA256

f8bc00831cecba37e97c5599892d82679d356cda73fb89270bf56cef1af408d7
SHA512

8908e70d304820c9725904aa1e5843cb3e881e59dac0d91f9c883cc0b8a899547c92553f5eeb4123f40dfeb8727c786e5752a61dff17e071e4d9e841a2914ac1
SSDEEP

24576:wg3yBCUBn7rus8okF6c7oFQ4dh+mIeHyOcbI50BCmzqZY:jyBHd7KsLkFBEFQ4dhhI7bBHzqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e243596b4c545ba098112fa62a4f5aee_JaffaCakes118

Files

e243596b4c545ba098112fa62a4f5aee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6309c72b601bd35e23a28dca5e1ca03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetLastError
LocalFree
IsBadCodePtr
FindClose
LoadLibraryExW
FreeEnvironmentStringsA
FreeConsole
CreateMutexA
GlobalUnlock
UnmapViewOfFile
MapViewOfFile
HeapCreate
SetLastError
HeapDestroy
SetVolumeMountPointA
CreateFileA
GetModuleHandleA
GetACP
ExitProcess

user32

DrawMenuBar
DispatchMessageA
DrawEdge
CheckRadioButton
GetIconInfo
CopyRect
IsWindow
GetFocus
CallWindowProcA
DefWindowProcW
FillRect
GetDlgItem
GetDC
MessageBoxA

uxtheme

DrawThemeIcon
GetThemeRect
DrawThemeText
DrawThemeEdge
GetThemeSysInt

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ