8bd017a65833358e8f3dd874e2ed93f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bd017a65833358e8f3dd874e2ed93f5_JaffaCakes118
Size

236KB
MD5

8bd017a65833358e8f3dd874e2ed93f5
SHA1

ef737c9117c1aceed0a52a81bb626de0f2284cf0
SHA256

1b094e1dddb5e87bab61d33e0e9ca079506f3a5122b7a3e2dbd78e44d788f093
SHA512

ec1a2bde6a2a0cd66e6f962a23bd4d05ac3fe9becce2b4252ed56cd2efe30f54327050ba57658fcab96a4ee2822b78a327bcaee92aa635461ab06a7b403684ad
SSDEEP

6144:xJmPst4GGLRLxPw5YtRXnFbwR2fLiXJ5/e/VL:xXGGmLdw5YRXnFb4iiXJo/VL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd017a65833358e8f3dd874e2ed93f5_JaffaCakes118

Files

8bd017a65833358e8f3dd874e2ed93f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa5e9beca439f604351e9f882dc87694

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
LoadLibraryExA
HeapCreate
GetCalendarInfoA
GetLastError
GetConsoleAliasA
CloseHandle
FreeEnvironmentStringsA
TlsGetValue
FindClose
LocalLock
GlobalUnlock
LocalFree
GetConsoleCP
Sleep
CreateFileMappingA
FindAtomA
WaitForSingleObjectEx
GetModuleHandleA

user32

DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcA
GetDlgItem
CallWindowProcA
SetFocus
GetMessageA
CascadeWindows
DrawTextA
GetDC
DrawEdge
CreateDialogParamA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ