3acfb32b1ac2459607018c7ae65845f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3acfb32b1ac2459607018c7ae65845f6_JaffaCakes118
Size

815KB
MD5

3acfb32b1ac2459607018c7ae65845f6
SHA1

258f1f8c5404919890b6910abf0054e9618cb455
SHA256

3e4087d1abff52d4ecf92b1e65192dff83559a1f9219523f1f6ca1a8a6f30dfd
SHA512

0f3ef402c7cb08438d08982d2c92b603993fec17efa4ecc65a959211b891b59885d32f236288fac785bdb4784831e96e638ce3c0fb4c0319bf875b445484314b
SSDEEP

24576:yGkWqWkogrMMKkzZlsUVrrkzFOmNk2zGkOL+TKaHTjwEC:qWxgrMMKktqUVruTKaz8EC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3acfb32b1ac2459607018c7ae65845f6_JaffaCakes118

Files

3acfb32b1ac2459607018c7ae65845f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa82f58bcabc3a65b8ec1907a0355a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
WaitForMultipleObjects
LocalLock
Sleep
FindAtomA
GetLastError
GetCalendarInfoA
GetConsoleCP
GetModuleHandleA
FindClose
GetConsoleAliasA
LocalFree
CreateFileMappingA
TlsGetValue
CreateFileA
HeapCreate

user32

CallWindowProcA
CreateDialogParamA
DrawTextA
CascadeWindows
SetFocus
GetDC
GetDlgItem
DrawEdge
DispatchMessageA
GetIconInfo
GetMessageA
IsWindow
DefWindowProcA
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ