4523d1a0f85f86286eaab0d3d4e44cf0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4523d1a0f85f86286eaab0d3d4e44cf0_JaffaCakes118
Size

392KB
MD5

4523d1a0f85f86286eaab0d3d4e44cf0
SHA1

9e5f87fdabc6ad3f079f4a38e405cbd670a56560
SHA256

540092228307a8bbcfdedc5a26b50b2900901b27124758814e7deb3670bc22bd
SHA512

0aaeee4c64192cd8c235016956c5db2874d0a141bb0c3f76e0479e1a669d94055f5924a54e981367ef52a4d6614639f2854a6fb331a94b9c40596248d52efae0
SSDEEP

12288:ozh/yF1tpKV+n4o6/yf81C1/FVKrm0I3U6:oEzKavfX0Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4523d1a0f85f86286eaab0d3d4e44cf0_JaffaCakes118

Files

4523d1a0f85f86286eaab0d3d4e44cf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dda4ac8b1053be12cb06555aacc5a0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetEnvironmentVariableA
GetACP
GlobalFree
CreateFileA
FindClose
GetModuleHandleA
FindResourceA
CreateProcessA
CloseHandle
CreateMutexA
GlobalUnlock
ReleaseMutex
HeapCreate
GetCommandLineA
ExitThread
DeleteAtom
LoadLibraryExW
PulseEvent
SetLastError

user32

DispatchMessageA
FillRect
GetIconInfo
GetDlgItem
DrawMenuBar
IsWindow
SetFocus
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CopyRect
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ