019b0c223560afe795b46c156ce12b8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

019b0c223560afe795b46c156ce12b8d_JaffaCakes118
Size

813KB
MD5

019b0c223560afe795b46c156ce12b8d
SHA1

10579f53c39f1443fbf422e10655a79183e1501b
SHA256

8432f8f781cc3a389a80ecbe8aea006ca0f8b5316201399b2f1fde28dd6ea22a
SHA512

1a37c6e9ee9d444e5cedb70848c3ee235bdfb9d0188a9865a7c4fed4bd41773369bb61032b219c7db42f38d95a2423855885008245f4be9be047321bb19f7980
SSDEEP

12288:wyGgEfu7Cv+N/GnSxsifJIdL+uo12SY+HgrSzqKX2IWPpUMiDxOIIhQQXP/Vysu0:kTd+AnCF00DY+AYqc2haMirIvXV1u0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
019b0c223560afe795b46c156ce12b8d_JaffaCakes118

Files

019b0c223560afe795b46c156ce12b8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c947327b43231a0c67d63aa5cec6a88f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
HeapCreate
CreateFileA
GetConsoleCP
FreeEnvironmentStringsA
GetLastError
GetACP
FindClose
LoadLibraryExA
TlsGetValue
GetModuleHandleA
CreateFileMappingA
IsDebuggerPresent
LocalLock
CloseHandle
GetStdHandle
LocalFree
IsBadReadPtr
CreateEventA
WaitForSingleObject

user32

GetDlgItem
CreateDialogParamA
SetFocus
GetMessageA
PostMessageA
DefWindowProcA
GetDC
EmptyClipboard
DispatchMessageA
EndMenu
GetIconInfo
ScrollWindow
IsWindow
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ