94ed4efd9745844484c71b1b517acdfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94ed4efd9745844484c71b1b517acdfb_JaffaCakes118
Size

392KB
MD5

94ed4efd9745844484c71b1b517acdfb
SHA1

070d8234969d1e64a24c8454e60e609682f64404
SHA256

a676342e5a3b0217155f575220b26de3b61ce9fc2be0607c20076154a92afbb8
SHA512

a613a27efca39d155e4a86000ddb311bc2ee48c4389245f3813b28b242e73767f1b13ae5f80ee8995e43afd40b5bc28a1fb917d51e33e14819140117b3c80572
SSDEEP

12288:gGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwqWlt:gGGEdwORVb4iiX2tzGyG2o7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94ed4efd9745844484c71b1b517acdfb_JaffaCakes118

Files

94ed4efd9745844484c71b1b517acdfb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f980a85ca9c72373f782a04d8ba158

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GetACP
TlsGetValue
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetConsoleAliasA
GetCalendarInfoA
Sleep
GetLastError
CreateFileMappingA
FindAtomA
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
CloseHandle
GetConsoleCP
LoadLibraryExA

user32

GetIconInfo
GetMessageA
CascadeWindows
DrawEdge
DispatchMessageA
CreateDialogParamA
GetDC
SetFocus
DefWindowProcA
CallWindowProcA
DrawTextA
IsWindow
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ