2dfcd9c8c32d3bca27e21221012c7211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dfcd9c8c32d3bca27e21221012c7211_JaffaCakes118
Size

813KB
MD5

2dfcd9c8c32d3bca27e21221012c7211
SHA1

9705752f85f76416c5cb6e3204f609904ddfa850
SHA256

87ed87a2a64329dfb683ef6249ff64993fdcf0eca93f8c91c3e423dd615e61e9
SHA512

24f8f69bf7b7926655a1560b948fdea3d6895f12b09298e0b4f234844cf7db7082a5525404105f3f2f1c858355d460699a73006d1c839863e5e315f476d41275
SSDEEP

24576:RX4tWohn+2OpZ89tGI3yFP2XDNjEQY6MI:RXKWu+J8PGfFP2XDNgQY6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dfcd9c8c32d3bca27e21221012c7211_JaffaCakes118

Files

2dfcd9c8c32d3bca27e21221012c7211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90f9984523a461ccbc9ceabf5f4eb716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
TlsGetValue
GetStdHandle
LoadLibraryExA
GetLastError
LocalUnlock
CreateEventA
FreeEnvironmentStringsA
WaitForSingleObject
CreateFileMappingA
IsBadReadPtr
CloseHandle
FindClose
GetConsoleCP
LocalLock
HeapCreate
LocalFree
IsDebuggerPresent
GetModuleHandleA

user32

GetDC
SetFocus
GetDlgItem
IsWindow
DefWindowProcA
DispatchMessageA
CreateDialogParamA
PostMessageA
EmptyClipboard
GetMessageA
GetIconInfo
EndMenu
ScrollWindow
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ