8e493f8bb510faf898ec931213f965c4_JaffaCakes118 | Triage

Sharing

General

Target

8e493f8bb510faf898ec931213f965c4_JaffaCakes118
Size

391KB
MD5

8e493f8bb510faf898ec931213f965c4
SHA1

8e2b203f05a97fdab4af1d21ce9e3a7452854f56
SHA256

1924ad77e6dbfc797ee854aef730ce533af54350a68f2606fbd61f6eb3faed0a
SHA512

3cb570852657b35cca2f76d221a1998db207ceb607813d56f0a137df78b8489f10b7fd5ec1c6256baa9cdcc2516c759a9594dc6808f67a03e5e70abbd4588544
SSDEEP

6144:4wsHp6Q1zs2JMdfiyTWgS6I+QrXzINENgiYA5j4urS7E/u2WJVSML:49Hp6Q14ayTdSp+QrXsN0B5j4NI22qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e493f8bb510faf898ec931213f965c4_JaffaCakes118

Files

8e493f8bb510faf898ec931213f965c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afbcc78f70d53f2dbcb560b15f37c7c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
HeapCreate
CloseHandle
FindClose
IsDebuggerPresent
LocalUnlock
WaitForSingleObject
LoadLibraryExA
CreateFileMappingA
GetModuleHandleA
GetACP
GetConsoleCP
CreateFileA
FreeEnvironmentStringsA
GetConsoleAliasA
GetCalendarInfoA
GetLastError
LocalFree
TlsGetValue
LocalLock

user32

IsWindow
GetIconInfo
DispatchMessageA
SetFocus
GetDC
DefWindowProcA
PostMessageA
ScrollWindow
CreateDialogParamA
GetMessageA
CallWindowProcA
GetDlgItem
CascadeWindows
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ