269fa1e4e14aa181badb7511354b93b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

269fa1e4e14aa181badb7511354b93b8_JaffaCakes118
Size

813KB
MD5

269fa1e4e14aa181badb7511354b93b8
SHA1

27d3d18fdcb4a875262af3e04e64d1f15451e444
SHA256

b1767c55ead561aeae3007e9d310158245d3682c60de1449ef8b7fa337ea7fa4
SHA512

15242009edd9dea4f6085e16eaccb5bef0faf32e96b1139be5740a25afe259edd8155524f01c146bf79c84ebc594cecfa5acd6e1d5acec5f72f908863eda7afd
SSDEEP

24576:X5oULGmdAUH9RmcGsp2BvAvdWDAIR9ZK3P:poCGmdAU9NGVWn4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269fa1e4e14aa181badb7511354b93b8_JaffaCakes118

Files

269fa1e4e14aa181badb7511354b93b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfc1111ac6d8f7ca234d74616d090a32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
FindClose
CreateEventA
GetModuleHandleA
FreeEnvironmentStringsA
IsDebuggerPresent
TlsGetValue
HeapCreate
IsBadReadPtr
LocalLock
GetLastError
LocalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
GetStdHandle
CreateFileA
CloseHandle
LocalFree

user32

GetDlgItem
EndMenu
DispatchMessageA
EmptyClipboard
GetIconInfo
GetMessageA
ScrollWindow
PostMessageA
IsWindow
CreateDialogParamA
SetFocus
GetDC
DefWindowProcA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecBool
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ