8c42e0de5ce714efc77f644f5aff6b04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c42e0de5ce714efc77f644f5aff6b04_JaffaCakes118
Size

392KB
MD5

8c42e0de5ce714efc77f644f5aff6b04
SHA1

aa1b730aa79ffac0d573ddb543832ec0ea75c54b
SHA256

bd8f98373e410dfdeb4031b29407afefbb67d021a7e79f3fccfbe95fbed5279c
SHA512

08ef67d976afd7e260769f4824dbf6c91b1be114c99edacdd5f93949a3db8eb32ba2660b4226e664bdd1ae9423c9145af1dae1b3d5c1fa94c9d724d0caf7a987
SSDEEP

12288:Qzh/yF1tpKV+n4o6/yf81C1/FVKrm0I9uU9:QEzKavfX0N4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c42e0de5ce714efc77f644f5aff6b04_JaffaCakes118

Files

8c42e0de5ce714efc77f644f5aff6b04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f78893e0afdea166b97af1f0d8565539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
TlsGetValue
GetACP
SetLastError
FindResourceA
CreateProcessA
DeleteAtom
GlobalFree
ExitThread
GetEnvironmentVariableA
CreateFileA
GetModuleHandleA
ReleaseMutex
FindClose
GetCommandLineA
CloseHandle
CreateMutexA
LoadLibraryExW
GlobalUnlock
PulseEvent

user32

CheckRadioButton
DispatchMessageA
DefWindowProcW
GetDlgItem
CopyRect
DrawMenuBar
GetDC
FillRect
SetFocus
IsWindow
DrawEdge
GetIconInfo
CallWindowProcA

msasn1

ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ