8d9f64f25533c27d653ffec1b8c80b9e_JaffaCakes118 | Triage

Sharing

General

Target

8d9f64f25533c27d653ffec1b8c80b9e_JaffaCakes118
Size

814KB
MD5

8d9f64f25533c27d653ffec1b8c80b9e
SHA1

88912073aa6e87a0c1e06739dc1e137a9d535fc4
SHA256

b83135089e097307c9cfb8e72dac41c9603b683935e2f72a96557ad0e55c79ab
SHA512

abb74f3cefc917246648198d046e7eded6147c55b05bbcb17978bdc2a8e71a5c697f8b33b065d1b06f2cfd754d95574f8371b24ea2cb15b50bf928d06865509e
SSDEEP

24576:VhnCU+umdx+R7znaLVS7yh7MTmyydgqDtLkEL:Vhpmx+Q5v4jcBPL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d9f64f25533c27d653ffec1b8c80b9e_JaffaCakes118

Files

8d9f64f25533c27d653ffec1b8c80b9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60d468ef364528dfca2c068712bac41e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
LoadLibraryExW
GetEnvironmentVariableA
GlobalFree
ExitThread
GetCurrentThreadId
FindClose
SetConsoleCursorInfo
HeapCreate
GetModuleHandleA
CloseHandle
GlobalUnlock
ReleaseMutex
SetLastError
FindResourceA
FindAtomA
PulseEvent
CreateMutexA
CreateFileA
GetACP

user32

GetDC
CopyRect
GetFocus
DrawEdge
DefWindowProcW
GetIconInfo
GetDlgItem
FillRect
CheckRadioButton
CallWindowProcA
IsWindow
DrawMenuBar
DispatchMessageA

msasn1

ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncEoid

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ