70fed30a26a96b67770c4cb84b43e756_JaffaCakes118 | Triage

Sharing

General

Target

70fed30a26a96b67770c4cb84b43e756_JaffaCakes118
Size

392KB
MD5

70fed30a26a96b67770c4cb84b43e756
SHA1

fa681e90ac7d0cf9dc88cc1d89495b798d146963
SHA256

d536cebd6f3eca82058bb068865bd6ad410619fc72c1a8aa03c469fd2c4992b8
SHA512

27d009741760cfc4cf8a66b7db3ce93c0167094d7586eaf8a601ab47953cd04923a7df056834e3ddac77943a56b254d052ae83af44b4fafaef76ea44b76f2897
SSDEEP

12288:IVhGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwPp3:eGGEdwORVb4iiX2tzGyG2oyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70fed30a26a96b67770c4cb84b43e756_JaffaCakes118

Files

70fed30a26a96b67770c4cb84b43e756_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50a78fb1a92b6923f3b5b8edee0ffb85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CloseHandle
Sleep
CreateFileA
CreateFileMappingA
GetACP
GetModuleHandleA
LoadLibraryExA
GlobalUnlock
WaitForSingleObjectEx
GetConsoleCP
LocalLock
GetCalendarInfoA
FindClose
FindAtomA
TlsGetValue
GetLastError
GetConsoleAliasA
LocalFree
FreeEnvironmentStringsA

user32

CreateDialogParamA
GetMessageA
DrawEdge
CallWindowProcA
SetFocus
DefWindowProcA
GetIconInfo
IsWindow
GetDlgItem
DispatchMessageA
GetDC
DrawTextA
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ