8759dea03cf62b48616b6d292ebf2dcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8759dea03cf62b48616b6d292ebf2dcf_JaffaCakes118
Size

392KB
MD5

8759dea03cf62b48616b6d292ebf2dcf
SHA1

307e991fee84654cafac7e3fdeb0482c943a97c5
SHA256

83a4ad20b3da28c9563f1784b16210ea12a45ee555659a0ee5c64a81e61eec73
SHA512

85b963fa2643332261ded4272db5f95f24a5b5e1b949976fab0a4431ede5b83e1114a6a7e98b712cd90d9ed539e65dc9a00a9e279c0b2786b6b02824331d0d46
SSDEEP

12288:IGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwqWlt:IGGEdwORVb4iiX2tzGyG2o7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8759dea03cf62b48616b6d292ebf2dcf_JaffaCakes118

Files

8759dea03cf62b48616b6d292ebf2dcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f980a85ca9c72373f782a04d8ba158

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GetACP
TlsGetValue
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetConsoleAliasA
GetCalendarInfoA
Sleep
GetLastError
CreateFileMappingA
FindAtomA
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
CloseHandle
GetConsoleCP
LoadLibraryExA

user32

GetIconInfo
GetMessageA
CascadeWindows
DrawEdge
DispatchMessageA
CreateDialogParamA
GetDC
SetFocus
DefWindowProcA
CallWindowProcA
DrawTextA
IsWindow
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ