45b5f3caf86f6d025d22bf0f2db673b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45b5f3caf86f6d025d22bf0f2db673b2_JaffaCakes118
Size

392KB
MD5

45b5f3caf86f6d025d22bf0f2db673b2
SHA1

430d57c998e8628725ba449152c8956bfaeaa3ce
SHA256

5dd03835c44dc7e7d3c92db67ce3424a11d24f25b9ac1b7415089a0c544bcbc0
SHA512

52f1bd95a94d390111e02b6bc514ebdf0250df526a1f94cdf4ad4c64c7d509514fb1de0f2c6544ee9d1d16264cb9c53485c3b87d3f404330ef07bee85b778b6f
SSDEEP

12288:GGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwqWlt:GGGEdwORVb4iiX2tzGyG2o7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45b5f3caf86f6d025d22bf0f2db673b2_JaffaCakes118

Files

45b5f3caf86f6d025d22bf0f2db673b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f980a85ca9c72373f782a04d8ba158

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GetACP
TlsGetValue
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetConsoleAliasA
GetCalendarInfoA
Sleep
GetLastError
CreateFileMappingA
FindAtomA
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
CloseHandle
GetConsoleCP
LoadLibraryExA

user32

GetIconInfo
GetMessageA
CascadeWindows
DrawEdge
DispatchMessageA
CreateDialogParamA
GetDC
SetFocus
DefWindowProcA
CallWindowProcA
DrawTextA
IsWindow
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ