4ce35038b294e104870a4ce2e2d2dbe1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce35038b294e104870a4ce2e2d2dbe1_JaffaCakes118
Size

392KB
MD5

4ce35038b294e104870a4ce2e2d2dbe1
SHA1

3f09861d71ada82ce38f868f14781140e3cb2b58
SHA256

3a26aea1391e9f5fdd1f4874bd46586eac583c375543b1378fd18929f718e9e4
SHA512

c4cd2d8f782e355347554c74989f8c7b9f758cecf7cf661f010f9e68e36c597e7b9daae7cfb19ff51804558d032793d0e2985ab502b7dbf62c29c513d1a964b8
SSDEEP

6144:PN+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEP6wW:QFe6CFkZZVryf9RlDLiPUwK2rW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce35038b294e104870a4ce2e2d2dbe1_JaffaCakes118

Files

4ce35038b294e104870a4ce2e2d2dbe1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8985adb7ff1539f84dff4906c547e88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetCalendarInfoA
LocalFree
CreateFileA
GetModuleHandleA
LoadLibraryExA
IsDebuggerPresent
HeapCreate
WaitForSingleObject
FindAtomA
GetACP
FreeEnvironmentStringsA
CloseHandle
GetLastError
LocalUnlock
GetConsoleAliasA
CreateFileMappingA
LocalLock
FindClose
TlsGetValue

user32

DrawEdge
CreateDialogParamA
GetDlgItem
CascadeWindows
DispatchMessageA
CallWindowProcA
DrawTextA
SetFocus
DefWindowProcA
GetMessageA
GetIconInfo
IsWindow
GetDC
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ