341f63ad1acac47039c39f6b81dbee5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

341f63ad1acac47039c39f6b81dbee5a_JaffaCakes118
Size

815KB
MD5

341f63ad1acac47039c39f6b81dbee5a
SHA1

fd8f4d57efc3d540bc410e98be5ec8a36c23da57
SHA256

a82804b77ad14adadcd1996de2277b6ccfe5c7fa3e30f6659df828c1edcc5b46
SHA512

48f8e6321f8654a17e50080f8b4689f481e8669c8caca8d867a1faab159b636d3bbfb8de48917beaf8f4f491afc61e2da07ded93a0830ed7002e92b4cf589ed1
SSDEEP

24576:pCua1lv1DsK3GbjUE9Eigtt89FpcdnaxJaW:odlSK3GbR9Ut89PinCJaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
341f63ad1acac47039c39f6b81dbee5a_JaffaCakes118

Files

341f63ad1acac47039c39f6b81dbee5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba060f4607a819d7c02ffa17b762178d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryExA
GetStdHandle
FindClose
GetFullPathNameA
CreateEventA
GetConsoleCP
IsDebuggerPresent
TlsGetValue
HeapCreate
LocalUnlock
CloseHandle
GetACP
CreateFileA
GlobalLock
IsBadReadPtr
LocalFree
GetModuleHandleA
CreateFileMappingA
FreeEnvironmentStringsA

user32

PostMessageA
SetFocus
GetDC
CreateDialogParamA
GetMessageA
DispatchMessageA
GetDlgItem
GetIconInfo
DefWindowProcA
IsWindow
ScrollWindow
EndDialog
EmptyClipboard
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ