86cd6c7b80b110b02a8cb9f9ce5bf594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86cd6c7b80b110b02a8cb9f9ce5bf594_JaffaCakes118
Size

392KB
MD5

86cd6c7b80b110b02a8cb9f9ce5bf594
SHA1

3470f0b57d6b613451a1475f73ab829ecdcad05c
SHA256

92719fe98e24c3b0079c0418d19bbc695aff2018d3d90eba3313cd66009b3c30
SHA512

de009bee028e1b6a263cc9f4f5a3850431c24cdc549b2f87f6d46f0c32d4323a6791c0a4b932cb5c1c93191d2ab768980760c44f9e5eebcccd17491fa0f47e2c
SSDEEP

12288:AGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwdb:AGGEdwORVb4iiX2tzGyG2oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86cd6c7b80b110b02a8cb9f9ce5bf594_JaffaCakes118

Files

86cd6c7b80b110b02a8cb9f9ce5bf594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15e88474e3fa5232845b56e929ea6e57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FindAtomA
GetLastError
WaitForSingleObjectEx
GetACP
CloseHandle
LocalLock
GetConsoleAliasA
LocalFree
FreeEnvironmentStringsA
GlobalUnlock
CreateFileA
Sleep
FindClose
GetCalendarInfoA
HeapCreate
TlsGetValue
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA

user32

GetMessageA
SetFocus
CascadeWindows
DrawTextA
IsWindow
CreateDialogParamA
DispatchMessageA
GetIconInfo
CallWindowProcA
DefWindowProcA
GetDlgItem
DrawEdge
GetDC
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ