b9ce8b9133d5273bb9e770547d7a68ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ce8b9133d5273bb9e770547d7a68ca_JaffaCakes118
Size

393KB
MD5

b9ce8b9133d5273bb9e770547d7a68ca
SHA1

440b270fd4978080019dbe283e1c27303b4a7c7b
SHA256

6db885318fffa59ca40e91c9d54cffdb935e897205855c8a0cf9bb7418dc7d58
SHA512

7e713ca47ab65e57a983f64365b84b027d27307dc43a5f6a0cbb465635b685a0f0f5d90cebf2805bb3e30d67daf0c05d10c692be74b08eeaef6a32cdb2ae541a
SSDEEP

6144:nnt86S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2qDE:4dGppg0zj7Y8Sz96jdbsucLJDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ce8b9133d5273bb9e770547d7a68ca_JaffaCakes118

Files

b9ce8b9133d5273bb9e770547d7a68ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562686003733b507807ade708030e5cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
CreateEventA
GetModuleHandleA
FindClose
IsDebuggerPresent
GlobalLock
LocalFree
CloseHandle
GetACP
CreateFileA
LoadLibraryExA
GetStdHandle
TlsGetValue
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetConsoleCP
LocalUnlock
CreateFileMappingA
GetFullPathNameA

user32

GetIconInfo
GetDC
DefWindowProcA
EndDialog
ScrollWindow
IsWindow
GetMessageA
PostMessageA
GetDlgItem
CreateDialogParamA
DispatchMessageA
SetFocus
EmptyClipboard
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ