0f9d56545207c8f22fb95481e67fbcc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f9d56545207c8f22fb95481e67fbcc7_JaffaCakes118
Size

393KB
MD5

0f9d56545207c8f22fb95481e67fbcc7
SHA1

5f8599193f4fbbcfb2834002b3c23962e76ea0e1
SHA256

645a7c57070f901408c75446b39530bff64f414432533053115da5b4c093df73
SHA512

6044c1e39c4fd53eb2e0afcb402cb2fbe95243e23d86ad00098445a41375c75aac924e36c38e79b7f9edb2ea0ad6f9ab99d5fb0cc53a2d935069cf6c8706744a
SSDEEP

12288:ba3KpJI6xj1dV9fJcEXW4OYIb5IiENCatSn:baCb1dV9fJhXWGHN8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9d56545207c8f22fb95481e67fbcc7_JaffaCakes118

Files

0f9d56545207c8f22fb95481e67fbcc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e62e993148051094d8944c6f3db8cce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
CreateFileA
FindClose
TlsGetValue
GetLastError
Sleep
CreateFileMappingA
GlobalUnlock
LocalFree
FindAtomA
CloseHandle
GetConsoleCP
FreeEnvironmentStringsA
GetACP
LocalLock
GetCalendarInfoA
WaitForMultipleObjects
LoadLibraryExA
GetConsoleAliasA

user32

GetMessageA
DefWindowProcA
CreateDialogParamA
CallWindowProcA
GetDlgItem
GetDC
DrawTextA
GetIconInfo
IsWindow
CascadeWindows
DispatchMessageA
DrawEdge
SetFocus
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ