5f4fcea450033389187cdb446c0efb97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f4fcea450033389187cdb446c0efb97_JaffaCakes118
Size

393KB
MD5

5f4fcea450033389187cdb446c0efb97
SHA1

94a2363e9800fd5d0c8670c15b0be80bf1919e27
SHA256

9a7d8e77a815ab2064e9fb9bf5c3b42e933ec7da0cbf4db027650869910968cc
SHA512

b7ef4a06e1dc95c623ef6594b4699d42ded6a2c0a9313b0820121e1a4d9ccf32cc5edf3cba8eb86befee6ac6a883069bcb23e21aa22d6b6e9d982159e32c17b8
SSDEEP

12288:8gR3KpJI6xj1dV9fJcEXW4OYIb5IiENCaLaPZ:JRCb1dV9fJhXWGHNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f4fcea450033389187cdb446c0efb97_JaffaCakes118

Files

5f4fcea450033389187cdb446c0efb97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14cc190c0aa43a84fc73797fc852cc46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
LoadLibraryExA
HeapCreate
GetCalendarInfoA
GetLastError
GetConsoleAliasA
CloseHandle
FreeEnvironmentStringsA
TlsGetValue
FindClose
LocalLock
GlobalUnlock
LocalFree
GetConsoleCP
Sleep
CreateFileMappingA
FindAtomA
WaitForMultipleObjects
GetModuleHandleA

user32

DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcA
GetDlgItem
CallWindowProcA
SetFocus
GetMessageA
CascadeWindows
DrawTextA
GetDC
DrawEdge
CreateDialogParamA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ