b210e5cb42cc56bc09b9967144a5fe39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b210e5cb42cc56bc09b9967144a5fe39_JaffaCakes118
Size

392KB
MD5

b210e5cb42cc56bc09b9967144a5fe39
SHA1

2728b632e777f62cf10c30bf8031872efaa38ec7
SHA256

2e43800ef789e073f2382ba55c5cd3fd749dc908ddea895bf1b52129a91ce998
SHA512

355df9681446ea7ecc57c6a4a25adabb0c0db031e0d495ce21fe38fdfc230af98b6b6c0b107a317377bef58c77c4d7f81baddf9aa741a4950be3dfe97ccd4937
SSDEEP

12288:UGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw5TN:UGGEdwORVb4iiX2tzGyG2oUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b210e5cb42cc56bc09b9967144a5fe39_JaffaCakes118

Files

b210e5cb42cc56bc09b9967144a5fe39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af4223fa70e88c4a1c744a9f72b95e30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
GetACP
GetConsoleCP
LocalFree
HeapCreate
GetConsoleAliasA
LoadLibraryExA
FreeEnvironmentStringsA
TlsGetValue
FindClose
FindAtomA
GetModuleHandleA
WaitForSingleObjectEx
CreateFileMappingA
GlobalUnlock
CloseHandle
LocalLock
CreateFileA
GetCalendarInfoA

user32

DefWindowProcA
GetIconInfo
SetFocus
DrawTextA
CascadeWindows
GetMessageA
DispatchMessageA
DrawEdge
IsWindow
CreateDialogParamA
GetDC
GetDlgItem
CallWindowProcA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ