668edb8ef604f576370fa8847afc9713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

668edb8ef604f576370fa8847afc9713_JaffaCakes118
Size

392KB
MD5

668edb8ef604f576370fa8847afc9713
SHA1

40951b21173da0a8cbb29070cbf13f00df743e9f
SHA256

c4c800e54fa48a99600bfa28a083399b49b8acfb3fbbc33fdd9b88a32b793d79
SHA512

6bec67260457df5ad91536df97acf0ed388bcaa32e71eb606fb2cc6d21772c62c0bbd1a560bfb3a3bf49531276faec309f38f146cd028cef5463998c80ab9409
SSDEEP

12288:xGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwHOWxj:xGGEdwORVb4iiX2tzGyG2okOWxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
668edb8ef604f576370fa8847afc9713_JaffaCakes118

Files

668edb8ef604f576370fa8847afc9713_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0874cfdb835d77f14c75c5fd8000bf7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
LoadLibraryExA
GetModuleHandleA
GetACP
GlobalUnlock
LocalFree
GetLastError
FindAtomA
CloseHandle
LocalLock
GetConsoleAliasA
CreateFileMappingA
FindClose
HeapCreate
CreateFileA
Sleep
TlsGetValue
WaitForSingleObjectEx
GetCalendarInfoA
FreeEnvironmentStringsA

user32

DrawTextA
GetDC
DispatchMessageA
CascadeWindows
SetFocus
GetMessageA
GetDlgItem
CreateDialogParamA
GetIconInfo
DrawEdge
DefWindowProcA
CallWindowProcA
IsWindow
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ