b0077ae782bf31f65b6e97327e83c8c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0077ae782bf31f65b6e97327e83c8c2_JaffaCakes118
Size

393KB
MD5

b0077ae782bf31f65b6e97327e83c8c2
SHA1

5a2ab2430800fa9129b26c3fce57f7218e52963f
SHA256

22e68ea14695d16a6500e83cc16e2fd9e53cdf7af2ac3082bb89964e15c00e6d
SHA512

ec76652f262405b7eba5d41e1073557e1ac65a8eabe960445667a6b4b9cab6ec86eae69cd60c48ae05ddcd013ba5152bfc9f5900b96511f7a258687b35ea2535
SSDEEP

6144:MHtxe6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn21zdf:rdGppg0zj7Y8Sz96jdbsucLJudf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0077ae782bf31f65b6e97327e83c8c2_JaffaCakes118

Files

b0077ae782bf31f65b6e97327e83c8c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab2e037d9f0b792827421b94edaead61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
CreateFileMappingA
IsBadReadPtr
IsDebuggerPresent
CreateEventA
GetConsoleCP
FreeEnvironmentStringsA
GlobalLock
GetFullPathNameA
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
TlsGetValue
GetACP
LocalFree
GetLastError

user32

GetDC
IsWindow
GetIconInfo
SetFocus
GetDlgItem
EmptyClipboard
PostMessageA
DispatchMessageA
ScrollWindow
EndDialog
GetMessageA
DefWindowProcA
CreateDialogParamA
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ