04403cb7768511b641dcc0b0e829c817_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04403cb7768511b641dcc0b0e829c817_JaffaCakes118
Size

392KB
MD5

04403cb7768511b641dcc0b0e829c817
SHA1

7bcce8d232fed71c25fa6032b65027d9473929d1
SHA256

a5309e551a7e30dc9ce8a1aee47e4d654f5eba8d1750202744f3c78ac766abb8
SHA512

deb1a3bee9492ba5c399319f6e962540f9eed72e9378e98223acc76c7ccaf88d721c92de42a8eca7ff2b90f5fc970bdde27618b24ac4ad97ea49682bf7ddbd5d
SSDEEP

6144:jvDp+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEW/Oz:fkFe6CFkZZVryf9RlDLiPUwKla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04403cb7768511b641dcc0b0e829c817_JaffaCakes118

Files

04403cb7768511b641dcc0b0e829c817_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91c6fbdf11cb0cfe8f2c80a5c6f9d279

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
CloseHandle
CreateFileMappingA
FindClose
FindAtomA
GetLastError
LocalLock
WaitForSingleObjectEx
GetCalendarInfoA
GlobalUnlock
CreateFileA
GetACP
HeapCreate
FreeEnvironmentStringsA
TlsGetValue
LoadLibraryExA
LocalFree
Sleep
GetConsoleAliasA
GetModuleHandleA

user32

GetIconInfo
GetDlgItem
DrawTextA
SetFocus
CreateDialogParamA
IsWindow
DispatchMessageA
CallWindowProcA
GetMessageA
GetDC
CascadeWindows
DrawEdge
DefWindowProcA
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ