25dabc7de093bdf6205efd0361afe778_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25dabc7de093bdf6205efd0361afe778_JaffaCakes118
Size

85KB
MD5

25dabc7de093bdf6205efd0361afe778
SHA1

2964cd098a51ac3e55fcc1d5ffc2e6fdf36fcab4
SHA256

9a9c9eaa12f00ca1edfc4f77744ad2eb5c7f4be8f0b4c0902d2e2e42747d8942
SHA512

56d73b09f2087bf6c445fc41cae507b12e808f1451d8ca54c2394452dbcaa23b0be9ae504938df3aa030a5807c68a41e9a3c12d8335326c4e4c6b08efcc46a17
SSDEEP

1536:BsIMAYekYKqh6tKORRa374tuenHbjh+SDCkPVoWbKs6LLcpSZ6cvX+7BSXC4owpv:GIrYekYK0wKkRa374Me7l+SDPGKKskci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25dabc7de093bdf6205efd0361afe778_JaffaCakes118

Files

25dabc7de093bdf6205efd0361afe778_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a487f7d2ee72e17d1509916a0d6f9eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetModuleHandleA
GetConsoleCP
WaitForMultipleObjects
GetACP
CreateFileA
GetLastError
LocalFree
GetConsoleAliasA
GetCalendarInfoA
FindClose
CreateFileMappingA
Sleep
LocalLock
FreeEnvironmentStringsA
HeapCreate
FindAtomA
TlsGetValue
LoadLibraryExA

user32

CallWindowProcA
GetIconInfo
IsWindow
GetDlgItem
SetFocus
GetDC
CreateDialogParamA
CascadeWindows
DrawTextA
DispatchMessageA
GetMessageA
DrawEdge
DefWindowProcA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ