1948c18b57192527e7cbab47f86b101f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1948c18b57192527e7cbab47f86b101f_JaffaCakes118
Size

393KB
MD5

1948c18b57192527e7cbab47f86b101f
SHA1

038ce2b4579830c5847f79bf6482ca36094ce6c0
SHA256

3b041c0af316c02b5950eaf5cd636f24cf01d986c9c39308c5f1c8dd01e4e60b
SHA512

8d046df22594de32b3af05cbc423dacfa3a56c34ec5b3a4ad228a43da1f814d1742362ad141a31a81ab0b23f20568a8dd6ed5f5340f75eca299e190ea972844e
SSDEEP

12288:q3KpJI6xj1dV9fJcEXW4OYIb5IiENCamnK:qCb1dV9fJhXWGHN2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1948c18b57192527e7cbab47f86b101f_JaffaCakes118

Files

1948c18b57192527e7cbab47f86b101f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cefe256ed86b525d1e140b5c167b729

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
LocalLock
GetLastError
GetCalendarInfoA
Sleep
CreateFileA
GetConsoleCP
GlobalUnlock
CloseHandle
FindClose
LocalFree
WaitForMultipleObjects
TlsGetValue
GetModuleHandleA
HeapCreate
LoadLibraryExA
FreeEnvironmentStringsA
GetACP
CreateFileMappingA
FindAtomA

user32

DispatchMessageA
CreateDialogParamA
GetDC
GetMessageA
DefWindowProcA
DrawTextA
SetFocus
IsWindow
GetDlgItem
DrawEdge
GetIconInfo
CallWindowProcA
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ