af5e7d4c455d0b60d1e3d31b7036c93a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af5e7d4c455d0b60d1e3d31b7036c93a_JaffaCakes118
Size

56KB
MD5

af5e7d4c455d0b60d1e3d31b7036c93a
SHA1

3e611fee124a39ba9091bceb27bb5653ccbc627f
SHA256

a92555c6e2993a7b7250a9be000ffeb8accc13acb135777b7283b0baffe143ab
SHA512

693492b75f5392981bb47ff1e9217ea317a99089866c143de3108889117e67c522a7a9b3883aab22182b95a1dc9e69839c04b28e7f7ca5603801762a9f35d2d9
SSDEEP

1536:maEQuC56Pkes6+/ee4gAcRbUKgmxEi7w4zRQN0GI/:DEQuC56PVs6+/ee4gxbUjmT84z2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af5e7d4c455d0b60d1e3d31b7036c93a_JaffaCakes118

Files

af5e7d4c455d0b60d1e3d31b7036c93a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11b35e4f975ce105710f696ee658d8e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
TlsGetValue
HeapCreate
GetConsoleCP
LoadLibraryExA
GetConsoleAliasA
LocalLock
GlobalUnlock
GetACP
CloseHandle
FindClose
GetModuleHandleA
FreeEnvironmentStringsA
GetLastError
FindAtomA
WaitForMultipleObjects
CreateFileA
LocalFree
Sleep
GetCalendarInfoA

user32

GetIconInfo
SetFocus
IsWindow
CallWindowProcA
DrawEdge
GetDC
CreateDialogParamA
DispatchMessageA
DefWindowProcA
GetMessageA
DrawTextA
CascadeWindows
GetDlgItem
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ