c07a92c1206dbfd444b6c3f522fc3e8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c07a92c1206dbfd444b6c3f522fc3e8f_JaffaCakes118
Size

393KB
MD5

c07a92c1206dbfd444b6c3f522fc3e8f
SHA1

3b98273c6ac5a7987e5fc2793100248ebe2553f1
SHA256

aa8f0418ac38ac63c3aac6dc6b98edcc2b4434c665c4c8762581f2e1e46647c0
SHA512

b23b2517cfc87941aeae16e16639f5be4b1216d96a5e80a23cf09f7da6a27e0369413094d2e5f0f4861fc7e021814e79b10e0ca1ce955f380114b560479535dd
SSDEEP

6144:aQt86S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2qDE:IdGppg0zj7Y8Sz96jdbsucLJDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07a92c1206dbfd444b6c3f522fc3e8f_JaffaCakes118

Files

c07a92c1206dbfd444b6c3f522fc3e8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562686003733b507807ade708030e5cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
CreateEventA
GetModuleHandleA
FindClose
IsDebuggerPresent
GlobalLock
LocalFree
CloseHandle
GetACP
CreateFileA
LoadLibraryExA
GetStdHandle
TlsGetValue
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetConsoleCP
LocalUnlock
CreateFileMappingA
GetFullPathNameA

user32

GetIconInfo
GetDC
DefWindowProcA
EndDialog
ScrollWindow
IsWindow
GetMessageA
PostMessageA
GetDlgItem
CreateDialogParamA
DispatchMessageA
SetFocus
EmptyClipboard
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ