d6c7da3da657f32a955b5381bc5499ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6c7da3da657f32a955b5381bc5499ca_JaffaCakes118
Size

159KB
MD5

d6c7da3da657f32a955b5381bc5499ca
SHA1

7a812801a038ea53f58a99c87aa1b7ec7f00ae66
SHA256

3e82dbb95b75e33c15487b4f58cfcabfd59e7969f4d26e90110f0128ed65e0fb
SHA512

b2971d53dd22c51d54d47300febe270a09b47c5d46982cc4f6c8b39d2dfe57e4e79f2b89bc12a3ec81ac4ed0bde536cb47c353eb5cd6c4bb3d339d5b61c33ce6
SSDEEP

3072:Vs0WMQ9VhUFJxDDw/iZ3hUtC/QWY+PCXvamL2CZwhLUrDzd+vu2cr/SiQPmrqzx:on5GJxw/2RUkQgHFGkunr/TQPmrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c7da3da657f32a955b5381bc5499ca_JaffaCakes118

Files

d6c7da3da657f32a955b5381bc5499ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be9425f949f4211069cb3c3d543b972c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetConsoleCP
CreateFileA
LoadLibraryExA
LocalFree
TlsGetValue
CloseHandle
FindAtomA
LocalUnlock
GetModuleHandleA
GetConsoleAliasA
IsDebuggerPresent
GetCalendarInfoA
GetLastError
LocalLock
WaitForSingleObject
GetACP
FreeEnvironmentStringsA
CreateFileMappingA
FindClose

user32

GetIconInfo
DefWindowProcA
IsWindow
DrawEdge
GetDC
GetMessageA
DispatchMessageA
CascadeWindows
SetFocus
GetDlgItem
DrawTextA
CreateDialogParamA
CallWindowProcA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ