3f1de703186a913ef7c14db65ef9538b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1de703186a913ef7c14db65ef9538b_JaffaCakes118
Size

814KB
MD5

3f1de703186a913ef7c14db65ef9538b
SHA1

db6424613883165a0cb3391f9c6fbef2abf74a49
SHA256

85da405923dc4e436f1881b37aa42fdce0b8a94ff3458bfcb67299f455001cd2
SHA512

7df92c7d8be012db01e349eaa272b10192ee4a37241c6f8580e7837ea822bb8915bf91392a9d5c99d15c9cb72c7322173d1429b2b3561fa96156f18f6cd5932e
SSDEEP

24576:X9QA+gV7ApTCSIVmWPeOiLuE91oFZZVVkzkoG:eAD7qpIVmWaLT06NG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1de703186a913ef7c14db65ef9538b_JaffaCakes118

Files

3f1de703186a913ef7c14db65ef9538b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22a534bc425d4f372b1653cb8a0bb21c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FreeEnvironmentStringsA
TlsGetValue
CreateFileMappingA
LoadLibraryExA
WaitForSingleObjectEx
GlobalUnlock
HeapCreate
GetConsoleAliasA
LocalLock
FindClose
CloseHandle
FindAtomA
CreateFileA
LocalFree
Sleep
GetACP
GetCalendarInfoA
GetModuleHandleA
GetLastError

user32

DispatchMessageA
DrawEdge
DrawTextA
DefWindowProcA
CreateDialogParamA
GetIconInfo
GetDlgItem
GetDC
GetMessageA
CascadeWindows
CallWindowProcA
SetFocus
IsWindow
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ