60c4bd8555a9b004151c5b4c3b83be8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60c4bd8555a9b004151c5b4c3b83be8e_JaffaCakes118
Size

392KB
MD5

60c4bd8555a9b004151c5b4c3b83be8e
SHA1

0c43420614fad79d1dd4670cd6cc4d5d39382a24
SHA256

343b911b64592ee3596642d07d22b9dd308237f8601f3fcdfa5d25361f8e775b
SHA512

89abe8d6d678f3a92577a0de3e8eae2696106cf0e938baa35b3e6647bb2e8a667393b33545ae31740aa114f1a501faaac713620d49c190b425cc90fc8f10828c
SSDEEP

12288:H3BGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw7I+:H3BGGEdwORVb4iiX2tzGyG2oGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c4bd8555a9b004151c5b4c3b83be8e_JaffaCakes118

Files

60c4bd8555a9b004151c5b4c3b83be8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b67893580acb737c6662e4e323c7a706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
GlobalUnlock
FindClose
TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
GetConsoleCP
CreateFileA
GetACP
FreeEnvironmentStringsA
CreateFileMappingA
HeapCreate
GetCalendarInfoA
LocalFree
CloseHandle
GetLastError
LoadLibraryExA
WaitForSingleObjectEx

user32

CascadeWindows
CreateDialogParamA
SetFocus
DispatchMessageA
DrawTextA
IsWindow
DrawEdge
GetMessageA
GetDC
DefWindowProcA
GetDlgItem
GetIconInfo
CallWindowProcA
MessageBoxA

msasn1

ASN1BEREncFlush
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ