47a9c152a3b42910aa48c5aabf4680a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a9c152a3b42910aa48c5aabf4680a9_JaffaCakes118
Size

393KB
MD5

47a9c152a3b42910aa48c5aabf4680a9
SHA1

707f844d20e80edcc80b9f5dcf9f82fd68efcab8
SHA256

ef033ebdf8760108ecfc663bc0027ff294565fada0efac5c7d3148663b4be03a
SHA512

48e71d595a489154e91a284437691d0c2f42c6e9731cbf55d3d5b7aa9256b8c0badc7df8fd45b6f600d5d527c5e90e9b14ed4132ff6c622d4f858f58c07acf90
SSDEEP

12288:h3KpJI6xj1dV9fJcEXW4OYIb5IiENCaVkZT:hCb1dV9fJhXWGHNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a9c152a3b42910aa48c5aabf4680a9_JaffaCakes118

Files

47a9c152a3b42910aa48c5aabf4680a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

718dbf6797c02ac0110316aaf7c54b48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
GetLastError
CreateFileA
GetConsoleAliasA
FindAtomA
LoadLibraryExA
LocalLock
TlsGetValue
GetModuleHandleA
Sleep
CloseHandle
GetCalendarInfoA
GetACP
HeapCreate
WaitForMultipleObjects
FindClose
CreateFileMappingA
FreeEnvironmentStringsA
LocalFree

user32

CascadeWindows
DrawEdge
GetDlgItem
DrawTextA
DefWindowProcA
CallWindowProcA
DispatchMessageA
CreateDialogParamA
GetDC
IsWindow
SetFocus
GetMessageA
GetIconInfo
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ