a6c0ec5a745376b5d43cc09165cc2f4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6c0ec5a745376b5d43cc09165cc2f4b_JaffaCakes118
Size

393KB
MD5

a6c0ec5a745376b5d43cc09165cc2f4b
SHA1

b33e2881b23053d61daa955abdfba7270bc55786
SHA256

c3dab567e052da29974b874ab6a324af442043dcfc41e1057a30f762dfc3ab68
SHA512

26bc018b3cdb465337d5f2e84b9990b09f06098cd6539aa90be19689aa25ca9a1be2094d63ac0a7ca257e77585758b0c5dd039147c589c1e3d16512495ecf78d
SSDEEP

12288:9T3KpJI6xj1dV9fJcEXW4OYIb5IiENCak:9TCb1dV9fJhXWGHN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c0ec5a745376b5d43cc09165cc2f4b_JaffaCakes118

Files

a6c0ec5a745376b5d43cc09165cc2f4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

207e305d77600555b1d5612fd79349bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
Sleep
HeapCreate
LocalFree
GetACP
WaitForMultipleObjects
FindClose
GetModuleHandleA
CreateFileMappingA
TlsGetValue
LoadLibraryExA
GetConsoleAliasA
FindAtomA
GlobalUnlock
LocalLock
GetCalendarInfoA
CloseHandle
GetLastError

user32

GetMessageA
DrawEdge
IsWindow
GetDlgItem
SetFocus
DrawTextA
DispatchMessageA
DefWindowProcA
CreateDialogParamA
GetIconInfo
CallWindowProcA
GetDC
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ