fb23f9a1ded3f99e506016b29bc568ff_JaffaCakes118 | Triage

Sharing

General

Target

fb23f9a1ded3f99e506016b29bc568ff_JaffaCakes118
Size

340KB
MD5

fb23f9a1ded3f99e506016b29bc568ff
SHA1

5c43916bb17c0bbaa1ed29817d5cf56bbfa0f337
SHA256

bc435a6396a731c1e60fa3626b6ef5091af44195d59d9eb4687d9e46e7505423
SHA512

145afd8fde46d2a149241b839daf2a03c3feb2fe3070d4a5aa3ff559fa54e4a9297a29c2009da1b5f19808d7baa0bc9dfda996c3edeaa8a2b48197ec69ff0d65
SSDEEP

6144:jzkeILGtnB65QnQJ+3BewN67vl7+T3f+tDHt3YLoib0l+JBLOBPcJlRlWaf2rf9G:seN0UQJ+3gRvh+T3fc5oLoJl+XoQlWab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb23f9a1ded3f99e506016b29bc568ff_JaffaCakes118

Files

fb23f9a1ded3f99e506016b29bc568ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

686e1b9009690916da3b5b1e2d120b2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
GetConsoleCP
GetACP
FreeEnvironmentStringsA
CreateEventA
lstrlenW
GlobalLock
IsBadReadPtr
GlobalUnlock
HeapCreate
LocalFree
GetStdHandle
FindClose
CloseHandle
CreateFileMappingA
GetPrivateProfileIntA
GetModuleHandleA
IsDebuggerPresent
LoadLibraryExA

user32

SetFocus
GetListBoxInfo
GetIconInfo
RedrawWindow
DispatchMessageA
IsWindow
GetDlgItem
EndDialog
GetMessageA
GetDC
DialogBoxParamA
GetDlgItemTextA
CheckMenuItem
DrawIconEx

uxtheme

EnableTheming
CloseThemeData
GetThemeMetric
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ