d59c9a4725b3c3291667ad1d3838bd05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d59c9a4725b3c3291667ad1d3838bd05_JaffaCakes118
Size

813KB
MD5

d59c9a4725b3c3291667ad1d3838bd05
SHA1

75ed91c6641b6bb8323ee9a4b722119bec79901b
SHA256

7866493ab46edf9be1db1a2ec90bb17b6d219bc35e812049e08181ba01b1b73c
SHA512

8a7b88913dbb2e44244ceacd56a30da9c4ac5af143aefe78286b6ed7505157de857dce2db00df87ff3e5eda1522b4e52577a22e3bbe7f4b8b955aea4fa6c4d88
SSDEEP

12288:3aUCtUa1FL1XFv1DIhvDKkQ5GOs049l7aEn9boO4cCxDmX9JIY6tUL9FpfEwShgo:VCua1lv1DsK3GbjUE9Eigtt89Fpcdhgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d59c9a4725b3c3291667ad1d3838bd05_JaffaCakes118

Files

d59c9a4725b3c3291667ad1d3838bd05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60f84997545dabf9d145f36006be6cf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileMappingA
TlsGetValue
LocalFree
CloseHandle
HeapCreate
CreateEventA
GetConsoleCP
LocalUnlock
CreateFileA
GetLastError
GetFullPathNameA
IsBadReadPtr
GetStdHandle
GetModuleHandleA
IsDebuggerPresent
LoadLibraryExA
FindClose
LocalLock
FreeEnvironmentStringsA

user32

IsWindow
DispatchMessageA
EndDialog
GetMessageA
GetDC
PostMessageA
EmptyClipboard
DefWindowProcA
GetDlgItem
CreateDialogParamA
GetIconInfo
ScrollWindow
SetFocus
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecBool

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ