3b1101a99982924a4156d825001a88f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b1101a99982924a4156d825001a88f8_JaffaCakes118
Size

392KB
MD5

3b1101a99982924a4156d825001a88f8
SHA1

18246d4e165d59ae62bcdbd0df875009fc05c363
SHA256

1a270b41ea78378e3dd80998de8a36663440301b175fbb546907906556ba15db
SHA512

bcbf53766d4ddafd554a868b75564191d33b83b1e9a8bbf075a3d2686dc6d39baf57fe3b5c436cd702d3c7cebb8f335746a5a19eafec09fc326379a2e32c1506
SSDEEP

12288:cGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwqWlt:cGGEdwORVb4iiX2tzGyG2o7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b1101a99982924a4156d825001a88f8_JaffaCakes118

Files

3b1101a99982924a4156d825001a88f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f980a85ca9c72373f782a04d8ba158

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GetACP
TlsGetValue
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetConsoleAliasA
GetCalendarInfoA
Sleep
GetLastError
CreateFileMappingA
FindAtomA
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
CloseHandle
GetConsoleCP
LoadLibraryExA

user32

GetIconInfo
GetMessageA
CascadeWindows
DrawEdge
DispatchMessageA
CreateDialogParamA
GetDC
SetFocus
DefWindowProcA
CallWindowProcA
DrawTextA
IsWindow
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ