7531dd21aebc62f76ab1a42180385a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7531dd21aebc62f76ab1a42180385a03_JaffaCakes118
Size

393KB
MD5

7531dd21aebc62f76ab1a42180385a03
SHA1

9ad2020a9fb34d2933f8ebd21fd4ad175d7a81f7
SHA256

7133ec36e8e70504019fc91118179f1b02fff1c3eb8cd5efaca8fa78a871bae9
SHA512

8edac4879b5b8264a8725f395e313953609618dcff6fc73a37910e60fced3642cb00be49f97ce1121ca8d0740243bc0952e0c084663bb1aa0c9fb696fe9abcd0
SSDEEP

12288:V3KpJI6xj1dV9fJcEXW4OYIb5IiENCaVkZT:VCb1dV9fJhXWGHNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7531dd21aebc62f76ab1a42180385a03_JaffaCakes118

Files

7531dd21aebc62f76ab1a42180385a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

718dbf6797c02ac0110316aaf7c54b48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
GetLastError
CreateFileA
GetConsoleAliasA
FindAtomA
LoadLibraryExA
LocalLock
TlsGetValue
GetModuleHandleA
Sleep
CloseHandle
GetCalendarInfoA
GetACP
HeapCreate
WaitForMultipleObjects
FindClose
CreateFileMappingA
FreeEnvironmentStringsA
LocalFree

user32

CascadeWindows
DrawEdge
GetDlgItem
DrawTextA
DefWindowProcA
CallWindowProcA
DispatchMessageA
CreateDialogParamA
GetDC
IsWindow
SetFocus
GetMessageA
GetIconInfo
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ