46713da194510b4156f41fb706d280ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46713da194510b4156f41fb706d280ed_JaffaCakes118
Size

55KB
MD5

46713da194510b4156f41fb706d280ed
SHA1

4a32bbae0b8381656768bca9243294f017ef4989
SHA256

689d4210c6cd0e272f2a6c395fc7e327617317f3b647a3a81f1f4c60dad42749
SHA512

05939bd7a4d60f4fc03831b77a290877b135c12698ed04033a213e0d19cf633eee3594d8a5c2e4d683d503c4e96c6858c6cd57d09bfc2e2ff2dbb85c923ba97c
SSDEEP

1536:sAgZqJr1qq4FTRqnLg+RYkxmQDfnqjpWYvo4QrC0wreV46vnRsUN57+RwAdyqn4:smJr1qq4FsLg+RYkmy/qACo4+LwreJRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46713da194510b4156f41fb706d280ed_JaffaCakes118

Files

46713da194510b4156f41fb706d280ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9651484e6ec4bb43e9611c55d7599c9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetModuleHandleA
FreeEnvironmentStringsA
GetLastError
LoadLibraryExA
GetConsoleAliasA
FindClose
GetACP
TlsGetValue
HeapCreate
GetConsoleCP
CloseHandle
GetCalendarInfoA
LocalLock
CreateFileA
LocalFree
WaitForSingleObject
CreateFileMappingA
LocalUnlock
FindAtomA

user32

GetMessageA
CreateDialogParamA
DrawTextA
DispatchMessageA
IsWindow
GetDC
GetIconInfo
CallWindowProcA
DrawEdge
SetFocus
GetDlgItem
DefWindowProcA
CascadeWindows
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecNull
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ