8b32ec20c23cbe762894b3b0efb91b71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b32ec20c23cbe762894b3b0efb91b71_JaffaCakes118
Size

138KB
MD5

8b32ec20c23cbe762894b3b0efb91b71
SHA1

e5ebba0a591f475be68ab7e6c226fb1c93f87315
SHA256

1f8f0c4397eed1c94613541a30e2e341d605b79ec5438fcc4b5254aab9cee180
SHA512

5d0e164f88d6e3a2f4abc24a8ada4003ea1f0ca1a507fb08a0ae33e171a0007b8da9da73be3cbf027085cce4792533ee15c5108f59f6b211ffb76381e3337854
SSDEEP

3072:Niwur0oDMsacFvy/0+1HIAGx8SHvHwfwbXMsrOOnw0y+5:Nf1kMG1+5Pwv5OQ7y+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b32ec20c23cbe762894b3b0efb91b71_JaffaCakes118

Files

8b32ec20c23cbe762894b3b0efb91b71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad74e20ce3f157ab2ef307b942473c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
LocalFree
WaitForSingleObject
GetModuleHandleA
TlsGetValue
FreeEnvironmentStringsA
LocalLock
GetACP
IsDebuggerPresent
CloseHandle
CreateFileMappingA
FindClose
LoadLibraryExA
GetConsoleCP
CreateFileA
GetLastError
CreateEventA
IsBadReadPtr
HeapCreate
LocalUnlock

user32

ScrollWindow
DefWindowProcA
DispatchMessageA
GetDlgItem
PostMessageA
GetIconInfo
IsWindow
GetDC
EmptyClipboard
GetMessageA
CreateDialogParamA
EndMenu
SetFocus
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecBool
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ