aec02b44e74bca61f31f6a4bb48c3e0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aec02b44e74bca61f31f6a4bb48c3e0b_JaffaCakes118
Size

813KB
MD5

aec02b44e74bca61f31f6a4bb48c3e0b
SHA1

6b8af1ea881048583a1d67eb676a62d094ceffe9
SHA256

d9dd0ac61da469e1bda18a9e8623d17c0bde3fa39fc2e882a8fd9a0838726a4f
SHA512

7d82d1a2a6bd34b0fb22e26b8aebc96fa2823561df348246422ab67de956be3822e6a9bb6a85093315b7e7a36f034acde9426cbeb4ec56b5f8aa0a6258921657
SSDEEP

12288:DdoX8xToI7iuVzzIQ54RZ/d6D/Fll/vYMNnLEp5Nj80pefiQhmlLZqBSV9QffNl7:c8xEUzzKR/QCGnLk5Ng5fHUZqh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aec02b44e74bca61f31f6a4bb48c3e0b_JaffaCakes118

Files

aec02b44e74bca61f31f6a4bb48c3e0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1de72f694ae3e44bbc6cd6b6e1ce53e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CreateFileA
LocalLock
FreeEnvironmentStringsA
GetConsoleCP
CreateEventA
LocalUnlock
TlsGetValue
FindClose
LoadLibraryExA
GetModuleHandleA
IsDebuggerPresent
WaitForSingleObject
IsBadReadPtr
LocalFree
CloseHandle
GetLastError
GetACP
GetStdHandle
HeapCreate

user32

GetDC
GetIconInfo
DispatchMessageA
GetMessageA
EmptyClipboard
EndDialog
SetFocus
CreateDialogParamA
ScrollWindow
DefWindowProcA
PostMessageA
GetDlgItem
IsWindow
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecBool
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ