1162c5805e2cf1bbae820c9899a8a780_JaffaCakes118 | Triage

Sharing

General

Target

1162c5805e2cf1bbae820c9899a8a780_JaffaCakes118
Size

341KB
MD5

1162c5805e2cf1bbae820c9899a8a780
SHA1

d973ec3c06a268c55d4002f629a7db480cecb546
SHA256

2c58728a50304c417e1f0a8a491877ad21887f27c414fde96d3e68ee1660c33f
SHA512

d552e64140a6a21cc765213203054eb8bb0a0883f0e734c3c3f738816055d383b646c6933b6c2bce60bf37fb9b44df55296e17e8cf8bb8bb12025073a3b192d5
SSDEEP

6144:UuAtcCqEx8+bVq8uWSFU771ZDK1OJwpHa/u/WzcwUsG3FAdlLbZR2v8/GmJ:UzxFx8+bVq8uxUXC1OJwpJ+gsaAvms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1162c5805e2cf1bbae820c9899a8a780_JaffaCakes118

Files

1162c5805e2cf1bbae820c9899a8a780_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65f5b060d11eb3af4806168fa07a6dc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
FreeEnvironmentStringsA
CreateMailslotW
CreateFileMappingA
GetACP
CloseHandle
IsDebuggerPresent
GetStdHandle
GetConsoleCP
GlobalLock
GetModuleHandleA
LocalFree
FindClose
LoadLibraryExA
CreateFileA
IsBadReadPtr
lstrlenA
GetLastError
CreateEventA
HeapCreate

user32

CheckMenuItem
GetDC
RedrawWindow
GetMessageA
GetDlgItem
GetIconInfo
EndDialog
SetFocus
IsWindow
DispatchMessageA
DialogBoxParamA
GetListBoxInfo
GetDlgItemTextA
DrawIconEx

uxtheme

GetThemeColor
GetThemeMetric
EnableTheming
DrawThemeIcon
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ