06ea27b76e2013c6c44f6d1443762b35_JaffaCakes118 | Triage

Sharing

General

Target

06ea27b76e2013c6c44f6d1443762b35_JaffaCakes118
Size

159KB
MD5

06ea27b76e2013c6c44f6d1443762b35
SHA1

20614d0920fec28ae280ca9fa7b9473dbe147395
SHA256

b73ea51a75b73e70a43c05caaeb4a24f60588831997e02ddcfe046e08edc3c98
SHA512

1e4c272bc04bfe06e906e0f06ebe51c4d78b2d551272f03d793e8991a9a1e5445b977eed5ea3282fad596cff73f8071c0d3c9a9d2eac63eb47c25801d125f897
SSDEEP

3072:Vs0WMQ9VhUFJxDDw/iZ3hUtC/QWY+PCXvamL2CZwhLUrDzd+vu2cr/SiQPmrqzQ:on5GJxw/2RUkQgHFGkunr/TQPmrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ea27b76e2013c6c44f6d1443762b35_JaffaCakes118

Files

06ea27b76e2013c6c44f6d1443762b35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be9425f949f4211069cb3c3d543b972c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetConsoleCP
CreateFileA
LoadLibraryExA
LocalFree
TlsGetValue
CloseHandle
FindAtomA
LocalUnlock
GetModuleHandleA
GetConsoleAliasA
IsDebuggerPresent
GetCalendarInfoA
GetLastError
LocalLock
WaitForSingleObject
GetACP
FreeEnvironmentStringsA
CreateFileMappingA
FindClose

user32

GetIconInfo
DefWindowProcA
IsWindow
DrawEdge
GetDC
GetMessageA
DispatchMessageA
CascadeWindows
SetFocus
GetDlgItem
DrawTextA
CreateDialogParamA
CallWindowProcA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ