70295bcd651d09a897b2d6a5630182af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70295bcd651d09a897b2d6a5630182af_JaffaCakes118
Size

392KB
MD5

70295bcd651d09a897b2d6a5630182af
SHA1

036aebf67a4679e56e70f0ded23383d13e650581
SHA256

b62c6ad7e5e3c1054108eeb84b8c1bad19a70b30695b5ee7cc7a25faaac50f89
SHA512

405db290cac18dd91ae6b6ed4cdb942fcf9eaf8663dc6c57e884bd710e63ca74dbb2049918e168bfe4c3aec31e77227d9bf8bbfe8d5c24a8cf017f13e858f27a
SSDEEP

12288:iGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwzIl:iGGEdwORVb4iiX2tzGyG2oXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70295bcd651d09a897b2d6a5630182af_JaffaCakes118

Files

70295bcd651d09a897b2d6a5630182af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4f7eadf972f32c10a9b4c75765927bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
FreeEnvironmentStringsA
CreateFileMappingA
LocalFree
FindClose
GetModuleHandleA
GetConsoleAliasA
GetCalendarInfoA
Sleep
HeapCreate
GetConsoleCP
LoadLibraryExA
TlsGetValue
LocalLock
GetACP
GetLastError

user32

CascadeWindows
GetDC
DrawTextA
SetFocus
CreateDialogParamA
GetDlgItem
DispatchMessageA
DefWindowProcA
GetMessageA
DrawEdge
GetIconInfo
CallWindowProcA
IsWindow
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ