b6464a39366d9d363106b776154c4b56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6464a39366d9d363106b776154c4b56_JaffaCakes118
Size

813KB
MD5

b6464a39366d9d363106b776154c4b56
SHA1

d61a892b2b73ae38993c7ca57a41dbd688364d15
SHA256

5e40a2c62928a7c14e91caecf4121d95d37ab5cfb56f272c0d4324e9cdbf85be
SHA512

5ab4006d58964498f045c424350ab555e637671217e41647145792e0d9bb32c326295d623b402d077a9d027786ea80a833ff87919f7056dc7674f9a10e4bc74d
SSDEEP

12288:N/WGS1HB0h3uLbI0QA4vRmphQtcqcdrsaBhaWDn/3jgWYYxS1jC6c+U5rWq:07Hi3uLEDAqkmpVaBN7zgWvSy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6464a39366d9d363106b776154c4b56_JaffaCakes118

Files

b6464a39366d9d363106b776154c4b56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d56123a113a3b236ac8b5ababbee241

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
LoadLibraryExA
CreateEventA
WaitForSingleObject
GetConsoleCP
FreeEnvironmentStringsA
LocalFree
GetModuleHandleA
CreateFileA
HeapCreate
GetStdHandle
IsBadReadPtr
IsDebuggerPresent
GetACP
GetLastError
CloseHandle
LocalLock
CreateFileMappingA
LocalUnlock
TlsGetValue

user32

IsWindow
PostMessageA
EndMenu
DispatchMessageA
GetDlgItem
SetFocus
GetDC
ScrollWindow
DefWindowProcA
GetMessageA
EmptyClipboard
GetIconInfo
CreateDialogParamA
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ