f447ea103fc8fe1efd297add55d38414_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f447ea103fc8fe1efd297add55d38414_JaffaCakes118
Size

393KB
MD5

f447ea103fc8fe1efd297add55d38414
SHA1

6a429e86fb9b0c3f7d975f3091f9757fe27fb640
SHA256

3e9765a3c09bebe402ef84494cd8687bf20ad784e3bb726965fc36c43d021a34
SHA512

9684a0ed2d3656d544cff87fadb2cd02911ed65a6229c66142683540d22c6fae18ebda709a7f4d21ba78c9a482c0e17e606edecf060582afa8807cbc5c3317c3
SSDEEP

12288:8C3KpJI6xj1dV9fJcEXW4OYIb5IiENCa9GDo:8CCb1dV9fJhXWGHNOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f447ea103fc8fe1efd297add55d38414_JaffaCakes118

Files

f447ea103fc8fe1efd297add55d38414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71023911e2e4c8d8e6a1a60ecbd10176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
TlsGetValue
GetConsoleCP
Sleep
CloseHandle
LoadLibraryExA
CreateFileMappingA
GetACP
CreateFileA
GetCalendarInfoA
LocalLock
FindClose
WaitForMultipleObjects
FindAtomA
GetLastError
FreeEnvironmentStringsA
GetModuleHandleA
LocalFree
HeapCreate
GetConsoleAliasA

user32

CallWindowProcA
IsWindow
GetDC
GetDlgItem
SetFocus
DispatchMessageA
DefWindowProcA
GetMessageA
GetIconInfo
CreateDialogParamA
CascadeWindows
DrawEdge
DrawTextA
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ