95b7e6ca894d5e5e0c17150ecdb6a211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95b7e6ca894d5e5e0c17150ecdb6a211_JaffaCakes118
Size

54KB
MD5

95b7e6ca894d5e5e0c17150ecdb6a211
SHA1

04bb596ad8165cdb5093158b5d54d13ff5bfff8b
SHA256

a1de513b5ccd046e98a81d210a368121696447aa2a88024c4baf8c811d7cb0d0
SHA512

85f5e07c9c12a183592a434a1d085be0f5195519c7972f7c34716b821740f0273435ad7263545089e5bacce0a36798f3c97a35c6f7f704b361ca06bdd9b2d685
SSDEEP

1536:IdHvYNd3NXvXtk9dGrDfRymHgYcThExtJhfk:OHvmtkmtyEcTQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95b7e6ca894d5e5e0c17150ecdb6a211_JaffaCakes118

Files

95b7e6ca894d5e5e0c17150ecdb6a211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dca8c3c19ca5b93d173731cfc2aca9f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
WaitForSingleObject
IsBadReadPtr
GetModuleHandleA
GetLastError
CloseHandle
CreateFileMappingA
CreateEventA
LocalUnlock
CreateFileA
IsDebuggerPresent
FreeEnvironmentStringsA
GetConsoleCP
TlsGetValue
LoadLibraryExA
HeapCreate
LocalFree
GetStdHandle
LocalLock
FindClose

user32

DispatchMessageA
GetDlgItem
GetDC
DefWindowProcA
EmptyClipboard
ScrollWindow
CreateDialogParamA
IsWindow
PostMessageA
GetMessageA
SetFocus
EndMenu
GetIconInfo
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BEREncFlush

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ