ffa075fba91268cb92258c72f3dac3e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa075fba91268cb92258c72f3dac3e9_JaffaCakes118
Size

342KB
MD5

ffa075fba91268cb92258c72f3dac3e9
SHA1

65350c1896b7aa2c80e3a78f55da9724c87f98ad
SHA256

44492565d2c29cc02526cff01c1eb7e7b03ab0bcf9f74319106316c804f074df
SHA512

3e60e78263c0cfdcbb77b538988f776d86c99607a87555494ae0d96d5798454b48254e5c8537343158d937685123e51387efd734e9ccd8092eee564243428700
SSDEEP

6144:yet1tvYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvNP5Ch+Ic:ZxYvDsakbClM2pxYB3CuM/x4NPcUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa075fba91268cb92258c72f3dac3e9_JaffaCakes118

Files

ffa075fba91268cb92258c72f3dac3e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f6511425028125f051dfbc1973eebe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
lstrlenA
GlobalLock
CreateFileA
CreateMailslotA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

GetDlgItemTextA
EndDialog
GetIconInfo
IsMenu
SetFocus
DialogBoxParamA
RedrawWindow
GetDlgItem
DispatchMessageA
GetDC
GetListBoxInfo
CheckMenuItem
GetMessageA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ