d5fa294f99450477421e1acccfb7fd9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fa294f99450477421e1acccfb7fd9c_JaffaCakes118
Size

815KB
MD5

d5fa294f99450477421e1acccfb7fd9c
SHA1

644dd6f3d2351fbb4c69eaa8d1f23c22ba83eb70
SHA256

a7a522ff96bd6212dcec56c2834fd40b4eba047fda7e74b967d7576ef7a2352e
SHA512

8d5a871c3ddcf073528e83b26e7cacbff09e7add30d544161cea40058452d9a62ec383b4134389f7c119f0c5cf971f0a1f27d0dcea946b936bd9615c318be5b8
SSDEEP

12288:AcIu/QNqFASK0EzAl1OlgLzdWDYer7B/nhom0JEc6xzpieuXtkE7l1ompupBNjiG:A44UAOzIkU/nShKrxzpie+jom0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5fa294f99450477421e1acccfb7fd9c_JaffaCakes118

Files

d5fa294f99450477421e1acccfb7fd9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bebb972f8cc5bdc167c214d4ac9ec1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetConsoleCP
LocalUnlock
CreateFileMappingA
TlsGetValue
LoadLibraryExA
HeapCreate
GetACP
IsDebuggerPresent
CreateEventA
IsBadReadPtr
GlobalLock
GetStdHandle
CreateFileA
LocalFree
FreeEnvironmentStringsA
GetModuleHandleA
GetLastError
FindClose
GetFullPathNameA

user32

ScrollWindow
EndDialog
DispatchMessageA
PostMessageA
GetIconInfo
GetDlgItem
GetMessageA
IsWindow
GetDC
DefWindowProcA
EmptyClipboard
CreateDialogParamA
SetFocus
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ