d4a46c45c88651ff9fc97bd76b13295e_JaffaCakes118 | Triage

Sharing

General

Target

d4a46c45c88651ff9fc97bd76b13295e_JaffaCakes118
Size

392KB
MD5

d4a46c45c88651ff9fc97bd76b13295e
SHA1

98c2ea544effbae1d1eb1e47f7585f3083158b42
SHA256

09930bd503ada95e2f3c6b610482e1ff4765ee482e95e55d4145c96083d10295
SHA512

99833711aa18943c12b02a09dfdb2f099dfe260914723bc5146b041c38dbe7fe51f5c4179a055f70db91694c22b00835001d75eac23733f38b86c9bc95aea9b4
SSDEEP

12288:4GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwzIl:4GGEdwORVb4iiX2tzGyG2oXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a46c45c88651ff9fc97bd76b13295e_JaffaCakes118

Files

d4a46c45c88651ff9fc97bd76b13295e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4f7eadf972f32c10a9b4c75765927bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
FreeEnvironmentStringsA
CreateFileMappingA
LocalFree
FindClose
GetModuleHandleA
GetConsoleAliasA
GetCalendarInfoA
Sleep
HeapCreate
GetConsoleCP
LoadLibraryExA
TlsGetValue
LocalLock
GetACP
GetLastError

user32

CascadeWindows
GetDC
DrawTextA
SetFocus
CreateDialogParamA
GetDlgItem
DispatchMessageA
DefWindowProcA
GetMessageA
DrawEdge
GetIconInfo
CallWindowProcA
IsWindow
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ