ef671dd3707f59e9906b2968a95b742e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef671dd3707f59e9906b2968a95b742e_JaffaCakes118
Size

340KB
MD5

ef671dd3707f59e9906b2968a95b742e
SHA1

ae1a1ee6030d8d2275a7ba1fd41d2ef9333b2161
SHA256

e6db327a7207a2f59c6520ab1e745a8f8e80e7350fec9ec97467559cb16dc7a1
SHA512

04678056d909dcc014db1ee2b24f523b63b4667355df8a0d75e5f695b3ee2c9d259a42f7264ddfe27e9d7e7638ccd856a1613a751943428bb0d90319ae407bb8
SSDEEP

6144:ed6xsaGjzvHJlqVvdleNFfZEWPNstu2SWW001AEipMbqmhZiCFXbkC1WOuS+:ed6xsaIrHJlKlMFxEosBNWBimbvnWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef671dd3707f59e9906b2968a95b742e_JaffaCakes118

Files

ef671dd3707f59e9906b2968a95b742e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96010de139b80920fb02f6cdd2c4833d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindClose
LocalFree
GetStdHandle
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA
FreeEnvironmentStringsA
GlobalLock
GetACP
CreateEventA
GetPrivateProfileIntA
CloseHandle
lstrlenA
GetLastError
IsBadReadPtr
GlobalUnlock
IsDebuggerPresent
CreateFileA
GetConsoleCP

user32

CheckMenuItem
GetDC
GetListBoxInfo
SetFocus
RedrawWindow
EndDialog
GetDlgItemTextA
DialogBoxParamA
GetDlgItem
IsWindow
GetIconInfo
GetMessageA
DispatchMessageA
DrawIconEx

uxtheme

GetThemeColor
CloseThemeData
GetThemeMetric
EnableTheming
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ