8c84c09c3f9fdf6c794476ef8e863b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c84c09c3f9fdf6c794476ef8e863b2e_JaffaCakes118
Size

392KB
MD5

8c84c09c3f9fdf6c794476ef8e863b2e
SHA1

3c1c6436e923d3e58f37bf399984d9e58f91b9aa
SHA256

a4605f448bdd1901e8f5788423e68d888093660c7971be8b88cc866940a54804
SHA512

d69b969589832da41a28885081736e15eaabdef62ad1ece618e84647d8cbaf635fe57341fc4d70f75c3dc8d97313e54b94b6c9b951857fea20e404d55675bdc0
SSDEEP

12288:lGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw9:lGGEdwORVb4iiX2tzGyG2oS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c84c09c3f9fdf6c794476ef8e863b2e_JaffaCakes118

Files

8c84c09c3f9fdf6c794476ef8e863b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61547b3b118d8df5be80dc3870d6d170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
Sleep
HeapCreate
LocalFree
GetACP
WaitForSingleObjectEx
FindClose
GetModuleHandleA
CreateFileMappingA
TlsGetValue
LoadLibraryExA
GetConsoleAliasA
FindAtomA
GlobalUnlock
LocalLock
GetCalendarInfoA
CloseHandle
GetLastError

user32

GetMessageA
DrawEdge
IsWindow
GetDlgItem
SetFocus
DrawTextA
DispatchMessageA
DefWindowProcA
CreateDialogParamA
GetIconInfo
CallWindowProcA
GetDC
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ