057b5e5fa829ac652ac0b48afe4ac306_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057b5e5fa829ac652ac0b48afe4ac306_JaffaCakes118
Size

392KB
MD5

057b5e5fa829ac652ac0b48afe4ac306
SHA1

f7f08e8817f344f3416e1a71ebdaa9485daea470
SHA256

18cb9c27a898457b567a0d117259601befca85eae53149a7dd1b09a0d192ffa5
SHA512

bd36767407b15abed5051e8987fd2b86d92f9afefdb13a8a573128704bda937a2019c8518a2e9691f83f2a8d99e4d7791d965c770730afc35dcd7c856c87eb23
SSDEEP

6144:leYS+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZErQCUp:8YBFe6CFkZZVryf9RlDLiPUwKVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057b5e5fa829ac652ac0b48afe4ac306_JaffaCakes118

Files

057b5e5fa829ac652ac0b48afe4ac306_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d25801fc94936c098931b74d5db31802

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CloseHandle
HeapCreate
CreateFileA
GetConsoleAliasA
FindAtomA
GetConsoleCP
LoadLibraryExA
GetACP
GetModuleHandleA
LocalFree
CreateFileMappingA
GetLastError
GetCalendarInfoA
TlsGetValue
LocalLock
FreeEnvironmentStringsA
IsDebuggerPresent
LocalUnlock
FindClose

user32

GetIconInfo
DrawEdge
CascadeWindows
CallWindowProcA
DrawTextA
DispatchMessageA
CreateDialogParamA
DefWindowProcA
GetMessageA
SetFocus
GetDC
IsWindow
GetDlgItem
DrawIconEx

msasn1

ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ