2389342113236edcf8a32d79d8fd7af9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2389342113236edcf8a32d79d8fd7af9_JaffaCakes118
Size

392KB
MD5

2389342113236edcf8a32d79d8fd7af9
SHA1

417be1cb93ac48523002f9843bd4d3d5cdad3f6d
SHA256

ec3b72040dd7b8a365ffc72013cf57edd83b71fc8eb19230bd0e874f8b8039d6
SHA512

46b39c8253a97b9aeb80f33277531ad4584262a1d7c2be89faa235b818e9ae8a3c244dc884fdf77190becf7238dc1ae033612e88e8acde3a2e02d43fe09f9735
SSDEEP

12288:rCYGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw1SE+:rCYGGEdwORVb4iiX2tzGyG2o0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2389342113236edcf8a32d79d8fd7af9_JaffaCakes118

Files

2389342113236edcf8a32d79d8fd7af9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c95ada83b298a2e55e3a87c5db14378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObjectEx
CreateFileMappingA
CloseHandle
GetACP
GetModuleHandleA
GlobalUnlock
CreateFileA
FreeEnvironmentStringsA
LocalFree
GetConsoleAliasA
LoadLibraryExA
GetCalendarInfoA
FindAtomA
TlsGetValue
HeapCreate
GetConsoleCP
FindClose
Sleep
LocalLock

user32

CascadeWindows
GetIconInfo
DefWindowProcA
GetDlgItem
IsWindow
SetFocus
DrawEdge
DrawTextA
CallWindowProcA
CreateDialogParamA
DispatchMessageA
GetMessageA
GetDC
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ