87190c8b2e0abe85115956549a8b9803_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87190c8b2e0abe85115956549a8b9803_JaffaCakes118
Size

392KB
MD5

87190c8b2e0abe85115956549a8b9803
SHA1

27721c6658b2dafd3e457d8656d818b2ae5e4b8e
SHA256

ebe974e9086654aca30173e944f2deb671f49ac9622ff370e205bbe54cbe8abe
SHA512

2b79778f93ba94e882f24b2f03789bef64e3645621f8e6a9bb4107a436a4db2eac9940325db77b0677c2625727a6351d752e34009d442e2c57eb84a1714d4a0e
SSDEEP

12288:OBGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwATdv:OBGGEdwORVb4iiX2tzGyG2opT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87190c8b2e0abe85115956549a8b9803_JaffaCakes118

Files

87190c8b2e0abe85115956549a8b9803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

718555ba3d6219defaa89767e7631717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CreateFileMappingA
GetCalendarInfoA
Sleep
GetConsoleAliasA
GetConsoleCP
FreeEnvironmentStringsA
LocalLock
WaitForSingleObjectEx
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
FindAtomA
TlsGetValue
GetACP
LocalFree
GetLastError

user32

GetDC
IsWindow
GetIconInfo
SetFocus
GetDlgItem
CallWindowProcA
DrawTextA
DispatchMessageA
DrawEdge
CascadeWindows
GetMessageA
DefWindowProcA
CreateDialogParamA
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ