24b6e73f6e7c8c439c1abfb82c6cf414_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b6e73f6e7c8c439c1abfb82c6cf414_JaffaCakes118
Size

392KB
MD5

24b6e73f6e7c8c439c1abfb82c6cf414
SHA1

3d4fca6f605ee45c6275648b9a680f62e069be2f
SHA256

36cd54d7c2452640843ae62f7edd550121c264a5fa1b989d867a32a068ab0352
SHA512

fe5d0af68fcc666dfc5859c9e5d14167ef302bd2f1eb124caabd77020d974c535bd2194e3ae86853337d3ec3321df7aaaff0738cfcd25ba6a24d7915749360f2
SSDEEP

12288:bJ9GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwGNNB:V9GGEdwORVb4iiX2tzGyG2oXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b6e73f6e7c8c439c1abfb82c6cf414_JaffaCakes118

Files

24b6e73f6e7c8c439c1abfb82c6cf414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

180f94db63c4887cbaac4d174cd58636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
LocalLock
LoadLibraryExA
CreateFileMappingA
GetConsoleAliasA
GetConsoleCP
GetLastError
GetACP
TlsGetValue
FindClose
WaitForSingleObjectEx
GlobalUnlock
CreateFileA
GetCalendarInfoA
FreeEnvironmentStringsA
Sleep
LocalFree
FindAtomA
HeapCreate

user32

DrawTextA
SetFocus
CreateDialogParamA
DispatchMessageA
GetMessageA
CascadeWindows
GetDlgItem
GetIconInfo
IsWindow
CallWindowProcA
GetDC
DefWindowProcA
DrawEdge
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ