0e5c09e71a92970258ccf8e825031605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5c09e71a92970258ccf8e825031605_JaffaCakes118
Size

391KB
MD5

0e5c09e71a92970258ccf8e825031605
SHA1

8e6e8c4b823403abd51e06736652e158c1667a2e
SHA256

8a19d2182a6418dce6acdd6aa44fa21e3937c019d7ed62014be60caf7fee2a68
SHA512

50902a7e61247d673fce1f921f639030185452e79a450e6d6763a62efa47e788c2584cb755f967df6035cbb85e8b81f235fa447b07e6bd9cc52387edb00b63cb
SSDEEP

12288:ErHp6Q14ayTdSp+QrXsN0B5j4NI22aqx7:IZ7yhaRXs2QqyC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5c09e71a92970258ccf8e825031605_JaffaCakes118

Files

0e5c09e71a92970258ccf8e825031605_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba9803f16379412dbb017c9e7a911f58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
GetConsoleCP
GetACP
FreeEnvironmentStringsA
GetConsoleAliasA
TlsGetValue
LocalLock
GetCalendarInfoA
LocalUnlock
HeapCreate
LocalFree
FindAtomA
FindClose
CloseHandle
CreateFileMappingA
WaitForSingleObject
GetModuleHandleA
IsDebuggerPresent
LoadLibraryExA

user32

SetFocus
ScrollWindow
GetIconInfo
DefWindowProcA
DispatchMessageA
IsWindow
GetDlgItem
CascadeWindows
GetMessageA
GetDC
PostMessageA
CallWindowProcA
CreateDialogParamA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BERDecBool
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ