85b694d64f7f27354c6c3b6c3dd0e171_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b694d64f7f27354c6c3b6c3dd0e171_JaffaCakes118
Size

393KB
MD5

85b694d64f7f27354c6c3b6c3dd0e171
SHA1

da8267f52df0209d8190ac86c651553f9272efb2
SHA256

af1287c7fa422cb7c8a7fff45f4c91318c9d92acf77026d442fbf5074370cf34
SHA512

dff1ae9e6927e8eccfbf5f3ec99d65c1d832ce772579b232ff4e9bcaa9dfe1e01b4a129877c084049744ed50f17405b6f68c7bdb9a9ed9b25e0003e49186d396
SSDEEP

12288:BW3KpJI6xj1dV9fJcEXW4OYIb5IiENCaGNPO:BWCb1dV9fJhXWGHNePO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b694d64f7f27354c6c3b6c3dd0e171_JaffaCakes118

Files

85b694d64f7f27354c6c3b6c3dd0e171_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d040171e6e59ff81dc8448e8c5430be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
TlsGetValue
LocalLock
CreateFileA
WaitForMultipleObjects
Sleep
LoadLibraryExA
LocalFree
GetCalendarInfoA
FindAtomA
GetModuleHandleA
GetLastError
GetConsoleAliasA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

CallWindowProcA
CascadeWindows
GetIconInfo
IsWindow
SetFocus
DrawTextA
DefWindowProcA
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CreateDialogParamA
GetMessageA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ