484260b025144365b8b974e1c0acfa2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

484260b025144365b8b974e1c0acfa2e_JaffaCakes118
Size

393KB
MD5

484260b025144365b8b974e1c0acfa2e
SHA1

273b4d62c3d490b3fd603cec0317ec41b52fb5bd
SHA256

6783ce19b7cb32ce4863b78e371393cd8d469d4ae9345cd2ac0bc59676878caf
SHA512

fbed77316b79a3be58cee8dfca33d13d11822f67b1d56e826125401209cf897fd89f99708a2ccf60b3b6f98c672d6593a1e2c7369fa4ac572e54942514a29b94
SSDEEP

12288:fa3KpJI6xj1dV9fJcEXW4OYIb5IiENCatSn:faCb1dV9fJhXWGHN8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
484260b025144365b8b974e1c0acfa2e_JaffaCakes118

Files

484260b025144365b8b974e1c0acfa2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e62e993148051094d8944c6f3db8cce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
CreateFileA
FindClose
TlsGetValue
GetLastError
Sleep
CreateFileMappingA
GlobalUnlock
LocalFree
FindAtomA
CloseHandle
GetConsoleCP
FreeEnvironmentStringsA
GetACP
LocalLock
GetCalendarInfoA
WaitForMultipleObjects
LoadLibraryExA
GetConsoleAliasA

user32

GetMessageA
DefWindowProcA
CreateDialogParamA
CallWindowProcA
GetDlgItem
GetDC
DrawTextA
GetIconInfo
IsWindow
CascadeWindows
DispatchMessageA
DrawEdge
SetFocus
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ