0a6fc3f65baeb2906eb5d2c8f9f7e138_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a6fc3f65baeb2906eb5d2c8f9f7e138_JaffaCakes118
Size

391KB
MD5

0a6fc3f65baeb2906eb5d2c8f9f7e138
SHA1

2f1517135d65fe734b7cae8e8c4e7862f2c2d85a
SHA256

8928c55bb73cd17cf64761ff12d203ada88c4bd081c39960533800f3a8cd11a6
SHA512

86cdad75292904ffa16dee6586fc866b604cdba3ce351eaad8a822a179df12235bc806c8badf47ef028b2dda08f4910008827436bfee8f8deb86202462f30158
SSDEEP

12288:hqHp6Q14ayTdSp+QrXsN0B5j4NI22n//pQjH:hqZ7yhaRXs2QqncH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a6fc3f65baeb2906eb5d2c8f9f7e138_JaffaCakes118

Files

0a6fc3f65baeb2906eb5d2c8f9f7e138_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c01b8451bf4e92dcc711c6f6777e482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObject
GetConsoleAliasA
LocalFree
GetACP
CreateFileMappingA
GetModuleHandleA
HeapCreate
GetCalendarInfoA
LocalUnlock
GetConsoleCP
LocalLock
FindAtomA
CloseHandle
TlsGetValue
FreeEnvironmentStringsA
IsDebuggerPresent
CreateFileA
FindClose
LoadLibraryExA

user32

GetDC
CascadeWindows
CallWindowProcA
GetMessageA
DefWindowProcA
GetIconInfo
IsWindow
ScrollWindow
GetDlgItem
CreateDialogParamA
PostMessageA
SetFocus
DispatchMessageA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ