ba071965c0de27df904b9751c8d5257a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba071965c0de27df904b9751c8d5257a_JaffaCakes118
Size

393KB
MD5

ba071965c0de27df904b9751c8d5257a
SHA1

d268badc3d4da644ef22ba05200e5cdbf981ad0d
SHA256

01a39ae48f687433f6faf9fca58b0bae1d1b44b4e1767a10ff0e095da1178b56
SHA512

78339103f55f53a4081814690ac55f28e402202290251457284fb1fab2cf0ffd03db84fa30770b6157bd20e9798946f8d0c8c9cde6888b8ab414be507d9bcc5a
SSDEEP

6144:a8t86S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2qDE:kdGppg0zj7Y8Sz96jdbsucLJDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba071965c0de27df904b9751c8d5257a_JaffaCakes118

Files

ba071965c0de27df904b9751c8d5257a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562686003733b507807ade708030e5cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
CreateEventA
GetModuleHandleA
FindClose
IsDebuggerPresent
GlobalLock
LocalFree
CloseHandle
GetACP
CreateFileA
LoadLibraryExA
GetStdHandle
TlsGetValue
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetConsoleCP
LocalUnlock
CreateFileMappingA
GetFullPathNameA

user32

GetIconInfo
GetDC
DefWindowProcA
EndDialog
ScrollWindow
IsWindow
GetMessageA
PostMessageA
GetDlgItem
CreateDialogParamA
DispatchMessageA
SetFocus
EmptyClipboard
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ