613c367166c6339df487cd3569c56a20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

613c367166c6339df487cd3569c56a20_JaffaCakes118
Size

392KB
MD5

613c367166c6339df487cd3569c56a20
SHA1

b685eef6d2501bbe9d87f949078c5a6472be8b51
SHA256

5efa9ee51ca893672c7acdd13604657200a15ae3d59c550c8a22461d8ff7e109
SHA512

70b78bf10413f7635fa929624cb3cd925c8416d6d2004f9515bc087a0e0cd60b528aa5f946121c5268abbcfc16b6fc1d9c72bb775baaabf406d2f0d785bedc53
SSDEEP

12288:HpaGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwmNdjw:HpaGGEdwORVb4iiX2tzGyG2o3NBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
613c367166c6339df487cd3569c56a20_JaffaCakes118

Files

613c367166c6339df487cd3569c56a20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86475de566dd599edb4bfd68f27f6910

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GlobalUnlock
GetConsoleCP
FindAtomA
GetCalendarInfoA
LoadLibraryExA
Sleep
TlsGetValue
GetModuleHandleA
LocalLock
CreateFileA
CreateFileMappingA
GetConsoleAliasA
FreeEnvironmentStringsA
CloseHandle
LocalFree
WaitForSingleObjectEx
HeapCreate
GetLastError
GetACP

user32

GetDC
CallWindowProcA
DrawTextA
CreateDialogParamA
GetIconInfo
DefWindowProcA
CascadeWindows
SetFocus
DispatchMessageA
DrawEdge
IsWindow
GetMessageA
GetDlgItem
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ