2137ba4a09651f27552b082c3ae6dc48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2137ba4a09651f27552b082c3ae6dc48_JaffaCakes118
Size

815KB
MD5

2137ba4a09651f27552b082c3ae6dc48
SHA1

8522c3fbc87f62afb80de52e8a55ed05aa4d2f3c
SHA256

fb63c53c6604da9fd2c41009a3675fc572c28af9a4c94f0e18fd2ba7b085fee8
SHA512

9ec61cd473183ca857bf3167672a37becc57a87a89a32702ce2396d0dcfcacf60a321932df54ed5aa7d683f95d9b7429ad6fa3406fd90f92becc908ddec08e60
SSDEEP

24576:z3pMv6097RI/5qmiueAP1/thF+IY2FZoq2BI:z3pMvr97u/5qmR6gT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2137ba4a09651f27552b082c3ae6dc48_JaffaCakes118

Files

2137ba4a09651f27552b082c3ae6dc48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d6cdb1f796fd4baa6ea6660304f18e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
FindAtomA
Sleep
CreateFileMappingA
CloseHandle
GetConsoleCP
HeapCreate
GetModuleHandleA
GetCalendarInfoA
FindClose
GetLastError
WaitForMultipleObjects
GetConsoleAliasA
LocalFree
CreateFileA
LocalLock
LoadLibraryExA
GlobalUnlock
FreeEnvironmentStringsA
TlsGetValue

user32

CallWindowProcA
CreateDialogParamA
IsWindow
GetMessageA
DrawEdge
DrawTextA
DispatchMessageA
CascadeWindows
SetFocus
DefWindowProcA
GetDC
GetDlgItem
GetIconInfo
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecSkip

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ