0f1c0cae2b6abb5dd7da8e671287a437_JaffaCakes118 | Triage

Sharing

General

Target

0f1c0cae2b6abb5dd7da8e671287a437_JaffaCakes118
Size

814KB
MD5

0f1c0cae2b6abb5dd7da8e671287a437
SHA1

32f466eead363c4b6dbdc9f970445ffc8f752c71
SHA256

cf87cb916986929a4b7ce24618ccce3b1a82c8e632b48ad76945e24b3e08b244
SHA512

0fdb82a8d180b80a28b95a37b078719a6dcf9995c87b858cc8d35e3384a8e44846c4307dc2c319512ef2cf383450dd0925ca034dc178ae5e0cc38468f1b1d0c8
SSDEEP

24576:mORnj12uvsbMPYC8dXjqRKuEAaCtqRawNMM5zj:mOywyMP58dX+R7EAakhsj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1c0cae2b6abb5dd7da8e671287a437_JaffaCakes118

Files

0f1c0cae2b6abb5dd7da8e671287a437_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b3e2ce3c75ca47a5af4c3c05c2994c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
WaitForSingleObject
FindAtomA
LocalUnlock
GetACP
LocalLock
LocalFree
CreateFileA
FreeEnvironmentStringsA
GetConsoleAliasA
IsDebuggerPresent
FindClose
LoadLibraryExA
GetCalendarInfoA
HeapCreate
GetModuleHandleA
CloseHandle
CreateFileMappingA
GetLastError
TlsGetValue

user32

DrawTextA
GetMessageA
CallWindowProcA
GetDlgItem
CascadeWindows
SetFocus
GetIconInfo
CreateDialogParamA
IsWindow
GetDC
DrawEdge
DefWindowProcA
DispatchMessageA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ