3ed05558d5a864a41461f027f1fec42b_JaffaCakes118 | Triage

Sharing

General

Target

3ed05558d5a864a41461f027f1fec42b_JaffaCakes118
Size

393KB
MD5

3ed05558d5a864a41461f027f1fec42b
SHA1

eeb0e98468b17459abb5812254d391049a6e3745
SHA256

b31647c9bfabfbb6169b74b5af8aa8f32ac2a6e24ea56b05e523f6bc57c3a3b2
SHA512

3c025afdb6f5e554442a9bb1f6c7862c1a63d133772c2f68545a81fad9c5ac5962e22fac8dfb042ba79c894e256da217602bcbe3745c50c630c0f0de7fc59b30
SSDEEP

12288:czBAG3KpJI6xj1dV9fJcEXW4OYIb5IiENCaMZ1:cz2GCb1dV9fJhXWGHNa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ed05558d5a864a41461f027f1fec42b_JaffaCakes118

Files

3ed05558d5a864a41461f027f1fec42b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef6428cb96186b8a3ae1babc9d3ff687

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GlobalUnlock
CreateFileMappingA
GetConsoleAliasA
CreateFileA
LocalFree
GetLastError
TlsGetValue
GetACP
GetCalendarInfoA
FindClose
GetModuleHandleA
FindAtomA
CloseHandle
GetConsoleCP
FreeEnvironmentStringsA
LoadLibraryExA
HeapCreate
WaitForMultipleObjects
LocalLock

user32

IsWindow
DefWindowProcA
DispatchMessageA
CallWindowProcA
CascadeWindows
CreateDialogParamA
GetIconInfo
GetDlgItem
GetMessageA
GetDC
SetFocus
DrawEdge
DrawTextA
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecSkip

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ