842df0e8badac0444cdef8880819a737_JaffaCakes118 | Triage

Sharing

General

Target

842df0e8badac0444cdef8880819a737_JaffaCakes118
Size

815KB
MD5

842df0e8badac0444cdef8880819a737
SHA1

acd66045f8b724540f204b9e417cddd754f23fe2
SHA256

eadcd2340cecb903d8b7aa43e62338eaa8ed5760eed391de6a5de434d56d006b
SHA512

af59e7406bbac494a2ec6b206a643db201b0d16fc9588dd915c4ced58c0fa382d9910060550f3ec558a600344b05aa6e5eee786a0a60347fa04d048dacf31f83
SSDEEP

24576:Vd3y4OlnZr3kza/srxGuVeSoZB3q1x8Fua:PMZwmXlMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
842df0e8badac0444cdef8880819a737_JaffaCakes118

Files

842df0e8badac0444cdef8880819a737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17b842dbd074d7f6851a09cfd6a096f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
FreeEnvironmentStringsA
GetConsoleCP
GetConsoleAliasA
GetCalendarInfoA
FindClose
GetModuleHandleA
CreateFileA
TlsGetValue
Sleep
LocalFree
GetLastError
HeapCreate
GlobalUnlock
FindAtomA
GetACP
LocalLock
CloseHandle
LoadLibraryExA
CreateFileMappingA

user32

CallWindowProcA
IsWindow
CreateDialogParamA
DrawTextA
GetDlgItem
GetIconInfo
DrawEdge
CascadeWindows
DefWindowProcA
GetDC
DispatchMessageA
GetMessageA
SetFocus
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ