23fa42842371d5c333c7b019ca516d96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23fa42842371d5c333c7b019ca516d96_JaffaCakes118
Size

392KB
MD5

23fa42842371d5c333c7b019ca516d96
SHA1

75046f3cb7d89283aa13646a8904ea8f8ce1556f
SHA256

e93a6c96e809bb33f55391a101f1f0a40f8147c3dbef035248abb03737530949
SHA512

f9a69c31be6c2f384ceba1d83748e358bdc3c11a0852bf585e5172aab914e8b0a8e38d0c52ffd18bf62fa7d77fac4b604135d9468e0c92e71c0037e19b46c4cc
SSDEEP

6144:H+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEWFH7:eFe6CFkZZVryf9RlDLiPUwKJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23fa42842371d5c333c7b019ca516d96_JaffaCakes118

Files

23fa42842371d5c333c7b019ca516d96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89d1a4ed48f9eff9a7e8fdcb74d11952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FindAtomA
GetLastError
WaitForSingleObject
GetACP
CloseHandle
LocalLock
GetConsoleAliasA
LocalFree
FreeEnvironmentStringsA
LocalUnlock
CreateFileA
IsDebuggerPresent
FindClose
GetCalendarInfoA
HeapCreate
TlsGetValue
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA

user32

GetMessageA
SetFocus
CascadeWindows
DrawTextA
IsWindow
CreateDialogParamA
DispatchMessageA
GetIconInfo
CallWindowProcA
DefWindowProcA
GetDlgItem
DrawEdge
GetDC
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ