616e8eacb20b91f115b36f129b0eae89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616e8eacb20b91f115b36f129b0eae89_JaffaCakes118
Size

373KB
MD5

616e8eacb20b91f115b36f129b0eae89
SHA1

c422ff882e5651a39c835cfaf428eb26c08b22c0
SHA256

6fcc4e467cbd8fd5ba63f8cca35c2b82d36bfec99868a0e95f082afd2243e285
SHA512

3e9c5638e68714556c8d1ea5225fcc9afad54fda77303274e5f570d325033e2892c4dc41a5caefbe67ec90d9841b3cc223704226814673cfdaeaefb0df082119
SSDEEP

6144:QcD/yA4DKrL3YXsrQRuuH0+sTviSlpJXy1SZylHF0UGNq3:QcD/tSKAcFD7Plp8iylJMq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616e8eacb20b91f115b36f129b0eae89_JaffaCakes118

Files

616e8eacb20b91f115b36f129b0eae89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e22330cb85e7cb164c6b412fc30769e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
WaitForSingleObject
IsDebuggerPresent
FindClose
GetConsoleCP
LocalFree
GetCalendarInfoA
GetConsoleAliasA
TlsGetValue
LocalLock
GetLastError
CreateFileMappingA
FreeEnvironmentStringsA
FindAtomA
CreateFileA
GetACP
LoadLibraryExA
HeapCreate
CloseHandle

user32

DefWindowProcA
GetDC
GetIconInfo
DrawTextA
DispatchMessageA
GetDlgItem
GetMessageA
CascadeWindows
SetFocus
CallWindowProcA
CreateDialogParamA
IsWindow
DrawEdge
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ