aee37ec078d71a65f808d52b5103dc62_JaffaCakes118 | Triage

Sharing

General

Target

aee37ec078d71a65f808d52b5103dc62_JaffaCakes118
Size

393KB
MD5

aee37ec078d71a65f808d52b5103dc62
SHA1

7ad98e043c220448890ea61e70928098e36fc3e7
SHA256

1a68210eb939015028d4b225f71a74f9cdfbe2a265c5b81cef69f3fd72c2e8a3
SHA512

0e2acabc99f2c0a1fe2d9b47a87bc0b27e9509f353db8d11b407529d23d261d152b2603cbdfc7ca930a3a0b9c54ee9005889e18428b1fcaf375ec73d71158111
SSDEEP

12288:Ah3KpJI6xj1dV9fJcEXW4OYIb5IiENCaKiJ:AhCb1dV9fJhXWGHNnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aee37ec078d71a65f808d52b5103dc62_JaffaCakes118

Files

aee37ec078d71a65f808d52b5103dc62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b25ebaba4670f51592ade2ab57a72045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetModuleHandleA
GetLastError
LocalFree
LoadLibraryExA
CreateFileMappingA
GetCalendarInfoA
HeapCreate
WaitForMultipleObjects
GetConsoleAliasA
TlsGetValue
GlobalUnlock
GetACP
FindClose
Sleep
CloseHandle
CreateFileA
FindAtomA
LocalLock
FreeEnvironmentStringsA

user32

DrawTextA
CallWindowProcA
SetFocus
GetIconInfo
IsWindow
CascadeWindows
DefWindowProcA
GetMessageA
CreateDialogParamA
GetDC
DispatchMessageA
DrawEdge
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ