ae4a413bec3ba52e7af2ddb9d966d752_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae4a413bec3ba52e7af2ddb9d966d752_JaffaCakes118
Size

815KB
MD5

ae4a413bec3ba52e7af2ddb9d966d752
SHA1

c29a1ac674cb65d67d78cc72445955239924af02
SHA256

6241eb306d90fdd827f8174dc73b8003ccae4b47a906680d6e508b199054044b
SHA512

79220acb31501e37bd1e5e4db8b6682095296cab591e83eeab75b5697c666caa8eb2c3a6a3dc5f6ab9df64daa0c298085aa4673276c01969d600bebe767b3f0e
SSDEEP

24576:Y0cSd16fZaAppWAYiGephO+YIysq/QEizKlI7Bh+lr:l6xa3YNYIynJNq+lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae4a413bec3ba52e7af2ddb9d966d752_JaffaCakes118

Files

ae4a413bec3ba52e7af2ddb9d966d752_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5458c212566c0823833455629d655430

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetLastError
TlsGetValue
GetCalendarInfoA
CreateFileA
CloseHandle
LocalLock
GetConsoleCP
HeapCreate
FindClose
GetConsoleAliasA
Sleep
FindAtomA
GlobalUnlock
LocalFree
FreeEnvironmentStringsA
CreateFileMappingA
GetModuleHandleA
WaitForMultipleObjects
GetACP

user32

CascadeWindows
CreateDialogParamA
DrawTextA
DispatchMessageA
SetFocus
GetDC
DrawEdge
GetIconInfo
DefWindowProcA
CallWindowProcA
GetDlgItem
GetMessageA
IsWindow
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecNull
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ