81d22a260fec74d99e6a91f3326d6b30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81d22a260fec74d99e6a91f3326d6b30_JaffaCakes118
Size

392KB
MD5

81d22a260fec74d99e6a91f3326d6b30
SHA1

0998516874a1028eeca4743d02b0faf9587c1bcb
SHA256

db7e02be8102740d8ff40e1468671e9f28a4b36776f9b4fccc120ea76d0d9986
SHA512

8eb0af4ec4914743aa98bcb1b9c39e2555f8080a1a5524011c1c43f51d3b067cb5fd50e732a4aef744e3eafbb103ecb3c68ac493db10fd6dd6d0637a825782eb
SSDEEP

12288:qsEGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwe8:REGGEdwORVb4iiX2tzGyG2or8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d22a260fec74d99e6a91f3326d6b30_JaffaCakes118

Files

81d22a260fec74d99e6a91f3326d6b30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce9a997930e5006b3c6391f0e5379adc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
TlsGetValue
GetACP
WaitForSingleObjectEx
GetLastError
FreeEnvironmentStringsA
HeapCreate
GetCalendarInfoA
CreateFileMappingA
CreateFileA
FindClose
LocalLock
GetConsoleCP
LoadLibraryExA
FindAtomA
LocalFree
CloseHandle
GlobalUnlock
GetModuleHandleA
GetConsoleAliasA

user32

IsWindow
SetFocus
CascadeWindows
GetDC
DispatchMessageA
GetDlgItem
CreateDialogParamA
DrawEdge
GetIconInfo
GetMessageA
DefWindowProcA
DrawTextA
CallWindowProcA
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ