8ceddc0a93a21740ec65e848e9f25546_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ceddc0a93a21740ec65e848e9f25546_JaffaCakes118
Size

815KB
MD5

8ceddc0a93a21740ec65e848e9f25546
SHA1

87b2477786e117312e642f31f872ca6ed577381d
SHA256

01aec521737d42b1f0c095d9b336c4b485855bb2b4bbd8460b96a836a019cb7d
SHA512

2797a93e915a7918744e6173979c52076d8cb5416f13eca34f93aa13af6293e279af2c796b130147fc97bbd2feb2f7b88d9f3249dee373397c711f5815164e02
SSDEEP

24576:F2LyGikvBi0KaFtAZBgEUdE1cEkc8lKkCYziKBukMXW:F2LZDBTKaFtAPgRnRc3Y++uW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ceddc0a93a21740ec65e848e9f25546_JaffaCakes118

Files

8ceddc0a93a21740ec65e848e9f25546_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0a1407ddf78f3891bd8b10f69b65d68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateEventA
CreateFileMappingA
GetLastError
GetConsoleCP
IsBadReadPtr
GlobalLock
GetFullPathNameA
CreateFileA
HeapCreate
TlsGetValue
GetStdHandle
LocalUnlock
FreeEnvironmentStringsA
LocalFree
FindClose
CloseHandle
IsDebuggerPresent
GetModuleHandleA
LoadLibraryExA

user32

IsWindow
GetDC
DefWindowProcA
PostMessageA
GetMessageA
EmptyClipboard
ScrollWindow
SetFocus
DispatchMessageA
EndDialog
CreateDialogParamA
GetDlgItem
GetIconInfo
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ