2faea863e727d000744ea868834247d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2faea863e727d000744ea868834247d2_JaffaCakes118
Size

372KB
MD5

2faea863e727d000744ea868834247d2
SHA1

e17d5e6495b2c356ed8ccdce6f7a175c60072dc6
SHA256

564708ea2d2b79c56dd37f19a7d97abb8a469abffdea5b76328788784e085c69
SHA512

631d34f0102162355bb3c51c8678d470cee11361074668db038b2888ba3223b577f340a5225a2ef4c891e0f85d0adb3918e34848e11e1f9b4fce4ccc68f4b56f
SSDEEP

6144:phBfD1h0uyePc5TczR0O2Eq0XuZ/FklfhQb1ggMXYNEa0urc/J55hQDOZkXLUbK:phBb1h0bePc5TYmnAcFklZQpbBNiuQLk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2faea863e727d000744ea868834247d2_JaffaCakes118

Files

2faea863e727d000744ea868834247d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb35053ae409300c29720c1de04f43d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
CreateFileMappingA
CreateFileA
TlsGetValue
WaitForSingleObject
GetModuleHandleA
LocalUnlock
LocalFree
GetConsoleCP
HeapCreate
FreeEnvironmentStringsA
IsDebuggerPresent
FindClose
FindAtomA
LoadLibraryExA
CloseHandle
GetCalendarInfoA
GetConsoleAliasA
GetACP
GetLastError

user32

CascadeWindows
PostMessageA
GetDlgItem
GetIconInfo
IsWindow
CreateDialogParamA
DispatchMessageA
CallWindowProcA
GetMessageA
DefWindowProcA
SetFocus
GetDC
ScrollWindow
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ