38ae7ca76c8ac7e773311c385ebafce6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ae7ca76c8ac7e773311c385ebafce6_JaffaCakes118
Size

393KB
MD5

38ae7ca76c8ac7e773311c385ebafce6
SHA1

2a0a25f89d84ca5a763c03160152e4d4ceb4bc24
SHA256

acbc35e712184849164ca727b978c38b9ba9cdb8d1da69cacae930d45a4cc808
SHA512

865caf328f5880b37b94f9579acd3924d67ea37d214d56fa40320905a7a47889082e84b940c89319d432666a1156ff06ec692a2087ce3130736a312b3fef6210
SSDEEP

12288:DK3KpJI6xj1dV9fJcEXW4OYIb5IiENCa1:WCb1dV9fJhXWGHNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ae7ca76c8ac7e773311c385ebafce6_JaffaCakes118

Files

38ae7ca76c8ac7e773311c385ebafce6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a487f7d2ee72e17d1509916a0d6f9eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetModuleHandleA
GetConsoleCP
WaitForMultipleObjects
GetACP
CreateFileA
GetLastError
LocalFree
GetConsoleAliasA
GetCalendarInfoA
FindClose
CreateFileMappingA
Sleep
LocalLock
FreeEnvironmentStringsA
HeapCreate
FindAtomA
TlsGetValue
LoadLibraryExA

user32

CallWindowProcA
GetIconInfo
IsWindow
GetDlgItem
SetFocus
GetDC
CreateDialogParamA
CascadeWindows
DrawTextA
DispatchMessageA
GetMessageA
DrawEdge
DefWindowProcA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ