100fe4dd43ce3fa4699d8468a342c4d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

100fe4dd43ce3fa4699d8468a342c4d6_JaffaCakes118
Size

392KB
MD5

100fe4dd43ce3fa4699d8468a342c4d6
SHA1

490efb3db812eb1fe2a50a4b16a01aa06c7e0c4d
SHA256

1cd6d63fb1103fd8c46a2134fdd3d5d84355f36ec5f9d712410f8440d9bd7123
SHA512

6b9f7b1ca816f4ce717383a4ecb232639ab306d70052d11233f7d6a4122139df2e432189ac07e0041e543d269b05ea5f7d71f9ac966db87ec16f04322606df48
SSDEEP

12288:ZFGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwaaPI:/GGEdwORVb4iiX2tzGyG2oB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
100fe4dd43ce3fa4699d8468a342c4d6_JaffaCakes118

Files

100fe4dd43ce3fa4699d8468a342c4d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa5e9beca439f604351e9f882dc87694

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
LoadLibraryExA
HeapCreate
GetCalendarInfoA
GetLastError
GetConsoleAliasA
CloseHandle
FreeEnvironmentStringsA
TlsGetValue
FindClose
LocalLock
GlobalUnlock
LocalFree
GetConsoleCP
Sleep
CreateFileMappingA
FindAtomA
WaitForSingleObjectEx
GetModuleHandleA

user32

DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcA
GetDlgItem
CallWindowProcA
SetFocus
GetMessageA
CascadeWindows
DrawTextA
GetDC
DrawEdge
CreateDialogParamA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ