10485ed49a0e095074810077dcb00bcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10485ed49a0e095074810077dcb00bcf_JaffaCakes118
Size

392KB
MD5

10485ed49a0e095074810077dcb00bcf
SHA1

aaf69695dac736fcf1e08ec426a28fbe3ab53c24
SHA256

b17ab54bef2541962f3313a5488cef96942e3c8090c8403f2c5a3aacb445e34b
SHA512

11e91f412a69938455e599e59ddf9b2ff2df60cba3c6e4d6d9946c543ceac84cae453c1ade3665ae775f467bac15ddd1a7b850b12f1bca175b78ab602e1a9d4d
SSDEEP

12288:yOBGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw7I+:yOBGGEdwORVb4iiX2tzGyG2oGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10485ed49a0e095074810077dcb00bcf_JaffaCakes118

Files

10485ed49a0e095074810077dcb00bcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b67893580acb737c6662e4e323c7a706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
GlobalUnlock
FindClose
TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
GetConsoleCP
CreateFileA
GetACP
FreeEnvironmentStringsA
CreateFileMappingA
HeapCreate
GetCalendarInfoA
LocalFree
CloseHandle
GetLastError
LoadLibraryExA
WaitForSingleObjectEx

user32

CascadeWindows
CreateDialogParamA
SetFocus
DispatchMessageA
DrawTextA
IsWindow
DrawEdge
GetMessageA
GetDC
DefWindowProcA
GetDlgItem
GetIconInfo
CallWindowProcA
MessageBoxA

msasn1

ASN1BEREncFlush
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ