94bd4e5557747f33b0e163a51ee09357_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94bd4e5557747f33b0e163a51ee09357_JaffaCakes118
Size

373KB
MD5

94bd4e5557747f33b0e163a51ee09357
SHA1

f5813da994b12c1c4924bbcc6d2a1b6251f2f1f1
SHA256

1e0aa59aa1a9c44531d277cc8a611b2f74d5a6bf10bdd84a6eca09b1a8aa727d
SHA512

b23da98f1b826f90627d6f6273775514227616bcf7b7c591761585abdb5ce43f98b7b02a514ebedd6fee8674465d77ae832d96c1979534a26b0c095e4f993468
SSDEEP

6144:xvBhZ0jQg4Q6Xq/60a5MuAv71/wAGyECi8M9aNlrkOdy5h08IiN:xvO6tPyuryECiglYOdyP05K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94bd4e5557747f33b0e163a51ee09357_JaffaCakes118

Files

94bd4e5557747f33b0e163a51ee09357_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8831d5085b86f4b7ba54c6c595016752

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetConsoleAliasA
LocalFree
GetCalendarInfoA
LocalLock
Sleep
CreateFileA
WaitForSingleObjectEx
GetConsoleCP
GetModuleHandleA
LoadLibraryExA
GetLastError
FindClose
GetACP
FindAtomA
HeapCreate
FreeEnvironmentStringsA
CreateFileMappingA
TlsGetValue
GlobalUnlock

user32

CreateDialogParamA
DrawTextA
GetDlgItem
DrawEdge
GetIconInfo
DispatchMessageA
SetFocus
CallWindowProcA
GetDC
IsWindow
GetMessageA
DefWindowProcA
CascadeWindows
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecNull
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ