014c080d9d298fc7deb57a8e284580d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014c080d9d298fc7deb57a8e284580d6_JaffaCakes118
Size

815KB
MD5

014c080d9d298fc7deb57a8e284580d6
SHA1

c451218c266ddf82e12b8aab67348d488968117c
SHA256

be915b060727d68173fcad7051abfae9c79613cda075201fa17df79b6b6199cd
SHA512

2184c6aa4b33c8910a5568e2436545d1045ef3d094627847ed861d71b754459852dbc069dfb636bcdc59f5fc780d397cc88eee137b65bb3455d4068cd0d7fff1
SSDEEP

12288:UoXzEmNkpQ2GWZWUyo3Jw217uv/AQN7ARLWyC6WvIhIa2L64q9M1YYvy5f:UoDEQ2GWZWG36CZlRqb6Fiaz4qK1YYvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014c080d9d298fc7deb57a8e284580d6_JaffaCakes118

Files

014c080d9d298fc7deb57a8e284580d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4588cb96c977b2e244208997034bb5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
FindClose
GetConsoleCP
CreateFileA
CloseHandle
CreateFileMappingA
GetModuleHandleA
GetFullPathNameA
lstrlenW
IsDebuggerPresent
LoadLibraryExA
IsBadReadPtr
GetLastError
GetStdHandle
GlobalLock
CreateEventA
FreeEnvironmentStringsA
HeapCreate
LocalUnlock
GetACP

user32

GetIconInfo
EndDialog
DispatchMessageA
DefWindowProcA
ScrollWindow
IsWindow
GetDlgItem
GetMessageA
CreateDialogParamA
EmptyClipboard
PostMessageA
GetDC
SetFocus
DrawIconEx

uxtheme

EnableTheming
DrawThemeIcon
GetThemeColor
CloseThemeData
GetThemeMetric

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ