0e6202c1d0105d157e15384f2904f81e_JaffaCakes118 | Triage

Sharing

General

Target

0e6202c1d0105d157e15384f2904f81e_JaffaCakes118
Size

391KB
MD5

0e6202c1d0105d157e15384f2904f81e
SHA1

5a67749702252b10c3e829aa402d87bb675efb20
SHA256

c3047dffc585d5e5183f5faccf6bc94d94082e29041b8752125fea93ff04c35a
SHA512

ca57ce3060566ec4b88f0c64a48f8a90eb28ae970fd959645a62179501c1e9493fafdcc73d7645364fdf1b91eecc78fa571f484bd7a1cee7829c0210bd4d301b
SSDEEP

6144:ztSN6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2Hl5bahVGA:idGppg0zj7Y8Sz96jdbsucLJPhVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e6202c1d0105d157e15384f2904f81e_JaffaCakes118

Files

0e6202c1d0105d157e15384f2904f81e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3454ed19f6f929ee231edfd5d77030b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
TlsGetValue
FreeEnvironmentStringsA
CreateFileMappingA
CreateEventA
GetStdHandle
LocalUnlock
GetModuleHandleA
FindClose
GetConsoleCP
GetFullPathNameA
LoadLibraryExA
GetLastError
GetACP
IsDebuggerPresent
CloseHandle
HeapCreate
LocalFree
IsBadReadPtr
CreateFileA

user32

GetDlgItem
EndDialog
ScrollWindow
PostMessageA
GetIconInfo
GetDC
GetMessageA
SetFocus
CreateDialogParamA
EmptyClipboard
DefWindowProcA
IsWindow
DispatchMessageA
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecBool

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ