175bd6dbb52a8f5fc5a7111fea767e2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

175bd6dbb52a8f5fc5a7111fea767e2b_JaffaCakes118
Size

813KB
MD5

175bd6dbb52a8f5fc5a7111fea767e2b
SHA1

2b1ee3ef06e501dbb88461858616b78743ad5fb5
SHA256

40186f188a073444ca41ebc5b88452005818e7157d6b79806517d6b7d39b7604
SHA512

a3adff1b21b64e2df02457af23a988af0df2e3649ac87bd4c3fdd8b5a9f19c19d520f21a3330b30e4a37c70432d83b6cd9fe9f0725fbbc746a546c6f1c3acabb
SSDEEP

24576:J5oULGmdAUH9RmcGsp2BvAvdWDAIR9ZKqY:DoCGmdAU9NGVWn4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
175bd6dbb52a8f5fc5a7111fea767e2b_JaffaCakes118

Files

175bd6dbb52a8f5fc5a7111fea767e2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04a091f28720cee28393641303ae6c9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetConsoleCP
IsDebuggerPresent
GetLastError
LocalLock
CreateFileA
LoadLibraryExA
GetModuleHandleA
WaitForSingleObject
GetStdHandle
HeapCreate
CreateFileMappingA
CreateEventA
GetACP
FreeEnvironmentStringsA
IsBadReadPtr
LocalUnlock
LocalFree
TlsGetValue
FindClose

user32

EmptyClipboard
DispatchMessageA
EndMenu
ScrollWindow
GetIconInfo
DefWindowProcA
CreateDialogParamA
GetDC
SetFocus
GetDlgItem
PostMessageA
IsWindow
GetMessageA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecBool
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ