697e1cd49d4365aa8ae805d26c2dde73_JaffaCakes118 | Triage

Sharing

General

Target

697e1cd49d4365aa8ae805d26c2dde73_JaffaCakes118
Size

56KB
MD5

697e1cd49d4365aa8ae805d26c2dde73
SHA1

45b4917a4c1356c526cb5abb22f85220ba0e7f56
SHA256

380831157b888076b76747ee6c1e7b4c0f7f04c8f1fd71184c50fa0f2bc3f157
SHA512

fed4cfd61761bd719a3b14c586209ee62ea6b2b8e6b9f823f1eabaadd654050689be28180bf7d22fbf54e5d997124ee2ce035d2cf1b66cc4da8e8de44fb9bc12
SSDEEP

1536:S3/Mu0hl/oNNd3NXvXtkeH5v3k3f4B6mTZcWCcofx9B6:GUuqGtkeH5v3jQce8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697e1cd49d4365aa8ae805d26c2dde73_JaffaCakes118

Files

697e1cd49d4365aa8ae805d26c2dde73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

158ac24aa3b0f4ebabaa107f0d2eaffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GlobalLock
CloseHandle
CreateFileMappingA
GetACP
LocalFree
CreateEventA
FindClose
GetModuleHandleA
GetLastError
TlsGetValue
GetFullPathNameA
HeapCreate
CreateFileA
GetConsoleCP
IsDebuggerPresent
LoadLibraryExA
IsBadReadPtr
FreeEnvironmentStringsA
LocalUnlock

user32

GetDC
IsWindow
SetFocus
PostMessageA
DefWindowProcA
EmptyClipboard
DispatchMessageA
GetMessageA
ScrollWindow
GetDlgItem
CreateDialogParamA
GetIconInfo
EndDialog
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecBool
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ