43243064df096e7c7c8582fa07e9bde3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43243064df096e7c7c8582fa07e9bde3_JaffaCakes118
Size

387KB
MD5

43243064df096e7c7c8582fa07e9bde3
SHA1

70b1719d283f20ed9b41fb757888c5e167d09520
SHA256

f88e1f27f3a5c7ec39f3438408d530e906e291d6df9943f3fe3a806dde6aa78e
SHA512

54f1d827f9e5a7ace4a18b2e1149728bfe5067ed7a8fb9c20195de085f235c3d10416c465d0ae2161c1ec2747fcd58388809f78a9061d314b07cd37c0d4c37d9
SSDEEP

12288:13KpJI6xj1dV9fJcEXW4OYIb5IiENCaVkZj:1Cb1dV9fJhXWGHNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43243064df096e7c7c8582fa07e9bde3_JaffaCakes118

Files

43243064df096e7c7c8582fa07e9bde3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

718dbf6797c02ac0110316aaf7c54b48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
GetLastError
CreateFileA
GetConsoleAliasA
FindAtomA
LoadLibraryExA
LocalLock
TlsGetValue
GetModuleHandleA
Sleep
CloseHandle
GetCalendarInfoA
GetACP
HeapCreate
WaitForMultipleObjects
FindClose
CreateFileMappingA
FreeEnvironmentStringsA
LocalFree

user32

CascadeWindows
DrawEdge
GetDlgItem
DrawTextA
DefWindowProcA
CallWindowProcA
DispatchMessageA
CreateDialogParamA
GetDC
IsWindow
SetFocus
GetMessageA
GetIconInfo
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ