35a7d97d41841f37f54d8e54afc8c2a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a7d97d41841f37f54d8e54afc8c2a7_JaffaCakes118
Size

391KB
MD5

35a7d97d41841f37f54d8e54afc8c2a7
SHA1

a358f9dc7e31c9657e38bef2637792abc62aa227
SHA256

b685fba45eb25f741cbd5793f1dcf39b84763785e50d1f97ec180af73ba6bb77
SHA512

e28f4a8e6c0039114a12108d9f884ce80a4faf781fe12092756ee28896ecb7df8bb37cc99c2a8c493a0f2d461e89bf4c80b90d8232818091b8b76e66cbe7b682
SSDEEP

12288:niGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwmE8n:niGGEdwORVb4iiX2tzGyG2o3EE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a7d97d41841f37f54d8e54afc8c2a7_JaffaCakes118

Files

35a7d97d41841f37f54d8e54afc8c2a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98701dda615d6982efae5c147d4de745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetModuleHandleA
GetACP
GetConsoleAliasA
LocalLock
GetLastError
FreeEnvironmentStringsA
GetCalendarInfoA
CreateFileMappingA
LocalFree
FindClose
Sleep
HeapCreate
CreateFileA
TlsGetValue
WaitForSingleObjectEx
GlobalUnlock
FindAtomA
CloseHandle
GetConsoleCP

user32

CascadeWindows
IsWindow
DrawEdge
GetDlgItem
GetDC
CreateDialogParamA
GetMessageA
SetFocus
DefWindowProcA
GetIconInfo
CallWindowProcA
DrawTextA
DispatchMessageA
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ