2c93ea160e19d02fc58c6da5accbab55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c93ea160e19d02fc58c6da5accbab55_JaffaCakes118
Size

815KB
MD5

2c93ea160e19d02fc58c6da5accbab55
SHA1

7719b9c14915f71c7ec8d5bdd8f6522ab0d77237
SHA256

2647d2404f312decb0bad6049991fc3905a2c420f2aa9bcee36d78e50e2f0a74
SHA512

d783e0f820bc18e21c57b520f455b8ba10490d85c95550b23a1273f3a855fb67da41214db1263125f5840ceb83891d9ebc82487b8e3f1d0e090281df92517f3d
SSDEEP

24576:WnKBspLNwQvuPuguhNS7/OkQMpb0gqjCjo:sxjvDEzTQE0gqeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c93ea160e19d02fc58c6da5accbab55_JaffaCakes118

Files

2c93ea160e19d02fc58c6da5accbab55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d6c8d464dd13b3029c2345a0087b74e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
LocalLock
LocalFree
CreateFileA
GlobalUnlock
HeapCreate
GetConsoleAliasA
FreeEnvironmentStringsA
LoadLibraryExA
CreateFileMappingA
TlsGetValue
WaitForMultipleObjects
Sleep
GetModuleHandleA
GetConsoleCP
GetACP
GetLastError
CloseHandle
GetCalendarInfoA
FindAtomA

user32

DrawEdge
GetIconInfo
CascadeWindows
IsWindow
GetDC
DefWindowProcA
CreateDialogParamA
GetMessageA
CallWindowProcA
DrawTextA
DispatchMessageA
SetFocus
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecEoid
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ