bc9fa7b078b2c0eac73c296ee8acd275_JaffaCakes118 | Triage

Sharing

General

Target

bc9fa7b078b2c0eac73c296ee8acd275_JaffaCakes118
Size

85KB
MD5

bc9fa7b078b2c0eac73c296ee8acd275
SHA1

f52fc2ebc33f610590984a15b5557e4badae3537
SHA256

c773318a5848b95d40b21a72f8bdb614d916567d2dcf3b0ace7db50879ca96a8
SHA512

5280ae6bfd5daf3d0ad9d7e44c3fd1c7bb4ee04f9511b14c398e5b83f045569dff26a23ecb222cf4860b7b6341603f5949b94d6f2f3d832572ca16a09e89ab77
SSDEEP

1536:EDB9CkYV+4VC6eENYbjh+SDCkPVoWbKs6LLcpSZ6cvX+7BSXC4owpv:EDBMkYV+4VC6eENWl+SDPGKKskcpghaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9fa7b078b2c0eac73c296ee8acd275_JaffaCakes118

Files

bc9fa7b078b2c0eac73c296ee8acd275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f077d5c061020460534a52f028c24c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
LoadLibraryExA
LocalFree
LocalLock
GetConsoleCP
Sleep
HeapCreate
FindClose
GetLastError
GetCalendarInfoA
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
TlsGetValue
CreateFileMappingA
FindAtomA
GetModuleHandleA
GetConsoleAliasA

user32

DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
GetMessageA
DrawTextA
SetFocus
GetIconInfo
CascadeWindows
IsWindow
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ