392869b10897432f1ef57c01ce9eddd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

392869b10897432f1ef57c01ce9eddd5_JaffaCakes118
Size

54KB
MD5

392869b10897432f1ef57c01ce9eddd5
SHA1

4572c4291976aa64dd5946f4de5756c2e1165512
SHA256

f03c340e042619a6d4f4ad6a78debc5bfc3c131f677bceae1922fa56a495d51d
SHA512

2e2f776191cc486fb5ba918cbc163eb3ed2304803c8bddf3c016643665b916313c3e5fdb249dd7fb1c7406f028ac3db4d24870a88f4f4b95a613d586d4d2002e
SSDEEP

1536:pQD/SfJqR3btmxk7zVfaiZ8v4FfqH5BvNsSb:pQD/SRy3btmO7zVii3VeHFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392869b10897432f1ef57c01ce9eddd5_JaffaCakes118

Files

392869b10897432f1ef57c01ce9eddd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21e6ead98952a6d405e6740b3bc1003f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
CloseHandle
GetStdHandle
WaitForSingleObject
IsBadReadPtr
CreateEventA
LoadLibraryExA
GetConsoleCP
CreateFileA
FindClose
LocalUnlock
HeapCreate
GetModuleHandleA
TlsGetValue
LocalFree
FreeEnvironmentStringsA
GetLastError
CreateFileMappingA
GetACP
LocalLock

user32

DefWindowProcA
CreateDialogParamA
IsWindow
SetFocus
DispatchMessageA
GetDlgItem
GetMessageA
ScrollWindow
EndMenu
GetIconInfo
PostMessageA
GetDC
EmptyClipboard
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush
ASN1BEREncLength

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ