8ed19ff222b3f348475746957a8a9f95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ed19ff222b3f348475746957a8a9f95_JaffaCakes118
Size

392KB
MD5

8ed19ff222b3f348475746957a8a9f95
SHA1

22f192f9632dd6dd69bf07b04f44b3cd05bdd04e
SHA256

57892688557fd178ac196a5d23c2244d0b604fb33cc2182a19c429c79f8eacee
SHA512

b513ae3462c922a21722fccdf07a7f5f894c91504d79ec6fb0bc282152f3064f94706ed534ccdea888d7f664407be4d6c1de2df7f05d18350772dc833a7fae9e
SSDEEP

12288:JJ9GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwGNNB:r9GGEdwORVb4iiX2tzGyG2oXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ed19ff222b3f348475746957a8a9f95_JaffaCakes118

Files

8ed19ff222b3f348475746957a8a9f95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

180f94db63c4887cbaac4d174cd58636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
LocalLock
LoadLibraryExA
CreateFileMappingA
GetConsoleAliasA
GetConsoleCP
GetLastError
GetACP
TlsGetValue
FindClose
WaitForSingleObjectEx
GlobalUnlock
CreateFileA
GetCalendarInfoA
FreeEnvironmentStringsA
Sleep
LocalFree
FindAtomA
HeapCreate

user32

DrawTextA
SetFocus
CreateDialogParamA
DispatchMessageA
GetMessageA
CascadeWindows
GetDlgItem
GetIconInfo
IsWindow
CallWindowProcA
GetDC
DefWindowProcA
DrawEdge
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ