05312c5761589b555885a20064fb9d90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05312c5761589b555885a20064fb9d90_JaffaCakes118
Size

393KB
MD5

05312c5761589b555885a20064fb9d90
SHA1

adfdf3141e71c8ca5c119a8237610b5da23292ee
SHA256

7d3e6797ec5393d92dd42d6fa0b1d69b9bdec28f48de57548fe7f91a757aef11
SHA512

5270566afe3463c64fe481197c95105103ec99c8119272e0c985378ac50277c1c857fcb740fa8ce494688cbbae2043681da413bfba6d2ae03f479a7a0935993e
SSDEEP

12288:Vzh/yF1tpKV+n4o6/yf81C1/FVKrm0IkMj/:VEzKavfX0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05312c5761589b555885a20064fb9d90_JaffaCakes118

Files

05312c5761589b555885a20064fb9d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90fea807edf772a9492d28fdf5b80ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
HeapCreate
LoadLibraryExW
CreateMutexA
TlsGetValue
FindClose
GetEnvironmentVariableA
GetModuleHandleA
DeleteAtom
ReleaseMutex
SetLastError
GlobalUnlock
GetACP
PulseEvent
ExitThread
GlobalFree
GetCommandLineA
FindResourceA
CloseHandle
CreateProcessA

user32

FillRect
CallWindowProcA
DefWindowProcW
DispatchMessageA
CheckRadioButton
DrawEdge
GetDC
IsWindow
SetFocus
GetIconInfo
GetDlgItem
CopyRect
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecBool

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ