d6f2d6991504f4ebc0da53ee2730bde9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6f2d6991504f4ebc0da53ee2730bde9_JaffaCakes118
Size

813KB
MD5

d6f2d6991504f4ebc0da53ee2730bde9
SHA1

4f39a31ec5f48b00a5f8f1dccf5b62feeb9cddfe
SHA256

e37915ad2590299266c85845c43d4ed1a0a17896fdf566588667d1d279789426
SHA512

9a4ffcf0c8463c76548f6ae04707e3e66687ab8526c2afe2b99a9d92e470260c333f68e777dd15e4a34f92dd52a70133d0b2c296119554d890fa4eeaed761e43
SSDEEP

24576:rlSjoaeOGp+e60dUWqhkdc1VYtHmSkMLR:ryXG5UWqiczNMLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f2d6991504f4ebc0da53ee2730bde9_JaffaCakes118

Files

d6f2d6991504f4ebc0da53ee2730bde9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2f91ba634b487e33b9fdbf0dd1c9fe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
GetACP
LocalLock
TlsGetValue
IsBadReadPtr
GetConsoleCP
HeapCreate
LocalUnlock
FindClose
WaitForSingleObject
CreateEventA
LoadLibraryExA
FreeEnvironmentStringsA
GetStdHandle
GetLastError
IsDebuggerPresent
CreateFileMappingA
LocalFree
CloseHandle

user32

EmptyClipboard
EndMenu
DefWindowProcA
GetMessageA
GetDlgItem
PostMessageA
IsWindow
ScrollWindow
SetFocus
GetIconInfo
DispatchMessageA
GetDC
CreateDialogParamA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ