cf2b198fcc51f22639f2c19acf0161ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf2b198fcc51f22639f2c19acf0161ef_JaffaCakes118
Size

392KB
MD5

cf2b198fcc51f22639f2c19acf0161ef
SHA1

8b0b6e7fad656ee4236574a3dc2ae01ed78722b8
SHA256

80bd618cf6db90ca6e7b0b5f86eb91bf18eef35bfde7e5d5dbffafdd18e9c385
SHA512

61155f53f076654c22cad4746978138acf014da3450a99ec83b8c4f131cfc3295096c79057d68eff2f6b1432d8ca478fa6af9d6a4fa8f7f52413350fe79fb608
SSDEEP

12288:XCOGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw1SE+:XCOGGEdwORVb4iiX2tzGyG2o0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf2b198fcc51f22639f2c19acf0161ef_JaffaCakes118

Files

cf2b198fcc51f22639f2c19acf0161ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c95ada83b298a2e55e3a87c5db14378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObjectEx
CreateFileMappingA
CloseHandle
GetACP
GetModuleHandleA
GlobalUnlock
CreateFileA
FreeEnvironmentStringsA
LocalFree
GetConsoleAliasA
LoadLibraryExA
GetCalendarInfoA
FindAtomA
TlsGetValue
HeapCreate
GetConsoleCP
FindClose
Sleep
LocalLock

user32

CascadeWindows
GetIconInfo
DefWindowProcA
GetDlgItem
IsWindow
SetFocus
DrawEdge
DrawTextA
CallWindowProcA
CreateDialogParamA
DispatchMessageA
GetMessageA
GetDC
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ