6863fb3dcab45131b5f130b6f7a16417_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6863fb3dcab45131b5f130b6f7a16417_JaffaCakes118
Size

54KB
MD5

6863fb3dcab45131b5f130b6f7a16417
SHA1

a3459809ee80f0e327f3cef68cdfbbd324da76ae
SHA256

44a6087761c316687a612109f927e2989aef49e37f4899e10b7d36230c90292f
SHA512

3f4a42fe07b1c88a1c52f4523accfd47164f50d71e5bab8d92df6a4e527cefaed7bbef30cd57b33d0ee612706dac18a528b052234ca9c1a1b4878196afbf8083
SSDEEP

768:8d4xINd3NXvyk+8h5kTvfJmrPXAVugmjc1rz0pF9oY342lndSsdB/+0HQvDcR2b1:8dMINd3NXvXtkrfNugh1RYNBWAQr0uv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6863fb3dcab45131b5f130b6f7a16417_JaffaCakes118

Files

6863fb3dcab45131b5f130b6f7a16417_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b69909b1c6426c7196d4274fcb187b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
TlsGetValue
LocalFree
GetStdHandle
LocalUnlock
GetConsoleCP
CreateFileA
GetACP
CreateFileMappingA
LoadLibraryExA
FindClose
IsBadReadPtr
HeapCreate
WaitForSingleObject
FreeEnvironmentStringsA
CreateEventA
LocalLock
GetLastError
IsDebuggerPresent

user32

GetIconInfo
PostMessageA
IsWindow
GetDlgItem
EndMenu
CreateDialogParamA
EmptyClipboard
GetMessageA
GetDC
DispatchMessageA
DefWindowProcA
ScrollWindow
SetFocus
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecBool
ASN1BEREncFlush

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ