2dc8f82ec5d0eb0f626842b5831b1363_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dc8f82ec5d0eb0f626842b5831b1363_JaffaCakes118
Size

392KB
MD5

2dc8f82ec5d0eb0f626842b5831b1363
SHA1

4a388a00e50a8399382f1efa417b56b7b2970961
SHA256

ab0a899607e5f7850ed59793d50705b368c09341360cc7513a6356a87f175cda
SHA512

493411e797a35926066a5e24143b6d5453f194477d38c3b5069a6db5bb47d53c1af497195cb8217b0596571998cdfcf2ec250e9454b8d6f5729757be57bfa86d
SSDEEP

12288:VGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw9:VGGEdwORVb4iiX2tzGyG2oS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dc8f82ec5d0eb0f626842b5831b1363_JaffaCakes118

Files

2dc8f82ec5d0eb0f626842b5831b1363_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61547b3b118d8df5be80dc3870d6d170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
Sleep
HeapCreate
LocalFree
GetACP
WaitForSingleObjectEx
FindClose
GetModuleHandleA
CreateFileMappingA
TlsGetValue
LoadLibraryExA
GetConsoleAliasA
FindAtomA
GlobalUnlock
LocalLock
GetCalendarInfoA
CloseHandle
GetLastError

user32

GetMessageA
DrawEdge
IsWindow
GetDlgItem
SetFocus
DrawTextA
DispatchMessageA
DefWindowProcA
CreateDialogParamA
GetIconInfo
CallWindowProcA
GetDC
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ