07318baf839047fa17bf245fff5d3b85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07318baf839047fa17bf245fff5d3b85_JaffaCakes118
Size

813KB
MD5

07318baf839047fa17bf245fff5d3b85
SHA1

45ded9216cd44c5142b589b56430dd7424c7ba42
SHA256

6d16ab6254d86361cb8314df88e4df3e21ba699d4868bbb60ea0a1ef4d508d14
SHA512

37fac26f8ce230a4affce4e2148154f86fbe45e9a6c7f07203a443ec4b9e3f78993718bb81a102b3af556aa0797338ef7ee74931746faf616a8dfbd2173f1db9
SSDEEP

12288:4+Y8+8nqVpcyUrPtlrfcMY9KA6qO0Wq0ksduDdZVkt87HdAJdi+R:4+vAclrEp9bO0Wq0ksEnVViGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07318baf839047fa17bf245fff5d3b85_JaffaCakes118

Files

07318baf839047fa17bf245fff5d3b85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4d795c9d7c1af71af4f0d22e9ac1274

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateEventA
LocalLock
IsDebuggerPresent
LoadLibraryExA
GetModuleHandleA
CloseHandle
FreeEnvironmentStringsA
LocalFree
CreateFileMappingA
FindClose
WaitForSingleObject
IsBadReadPtr
CreateFileA
GetConsoleCP
GetACP
GetLastError
HeapCreate
GetStdHandle
LocalUnlock

user32

GetIconInfo
CreateDialogParamA
GetMessageA
EndDialog
EmptyClipboard
GetDlgItem
GetDC
PostMessageA
SetFocus
IsWindow
DispatchMessageA
ScrollWindow
DefWindowProcA
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ