ee7838ef97c0cd1f19e6ad67719e98af_JaffaCakes118 | Triage

Sharing

General

Target

ee7838ef97c0cd1f19e6ad67719e98af_JaffaCakes118
Size

342KB
MD5

ee7838ef97c0cd1f19e6ad67719e98af
SHA1

75b16f4353a9016a89395cc563ad316fc75eb5da
SHA256

c881d13ebb7dbe1cd5fe1b187fab9bc79bc03f787eb3e0c6be74aea68a723b3a
SHA512

739e2b7fca94640835aab7189b93ccc89730827c5e65418dc9e064c77107da16b1ac0d628a81cd5d53c89ac8a76dd360f8b7a90454ab84ae321b2a4d9aa65d87
SSDEEP

6144:poftm2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX64NP5Ch+Is:p0yBe2Y0+iiZpJNANCFRBGGcl64NPcUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee7838ef97c0cd1f19e6ad67719e98af_JaffaCakes118

Files

ee7838ef97c0cd1f19e6ad67719e98af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3362497989692187bfa5bad86f48dded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
GetPrivateProfileIntA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsWindow
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ