d28ddee5960436ddd8d3789dc8fbab8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d28ddee5960436ddd8d3789dc8fbab8f_JaffaCakes118
Size

814KB
MD5

d28ddee5960436ddd8d3789dc8fbab8f
SHA1

3a6aa1b1532942120b99b9cbc7451d4553045566
SHA256

2592192731f7ccb09a6848327da479c1729305ca3b7b0d0eefd876d278236e82
SHA512

e949674f1c00b91d03f5266841c2c91d8e45ea9ab8e3e2a5be62232ee26428bb0bb4b24956d9d6e423e3a914bd265a6b8b3f15d16c7d6ab20ea984d379b07ff0
SSDEEP

12288:93wsGFwzA5ov8d5/HLUR9XD/81AahnsCx4eRg1Zexkh8FVp6g9QCC:9A2F8d5/U9Xz81AahnsCtoZ3q9Qx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d28ddee5960436ddd8d3789dc8fbab8f_JaffaCakes118

Files

d28ddee5960436ddd8d3789dc8fbab8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d0f25d742b7dfbe85c9e3f2b9fb4207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FreeEnvironmentStringsA
CloseHandle
GlobalUnlock
WaitForSingleObjectEx
TlsGetValue
CreateFileA
HeapCreate
FindClose
GetConsoleAliasA
LocalLock
LoadLibraryExA
LocalFree
GetCalendarInfoA
GetConsoleCP
GetACP
CreateFileMappingA
FindAtomA
GetLastError
Sleep

user32

CascadeWindows
GetDlgItem
GetIconInfo
CreateDialogParamA
GetMessageA
DrawEdge
SetFocus
GetDC
DispatchMessageA
DrawTextA
CallWindowProcA
IsWindow
DefWindowProcA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ