dbab7870d055a226931dd241bffad38d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbab7870d055a226931dd241bffad38d_JaffaCakes118
Size

392KB
MD5

dbab7870d055a226931dd241bffad38d
SHA1

831aa02cd41b2619e0f45ed3164c363e016cf3e4
SHA256

1197466aa39eb475da2dde9968e6e3cfa5ebbeb77a981da833b76d44d20b79ac
SHA512

1c908879561a210b22f4d3d05558d98e8888ae5ba64e3ac3ac452d3ffb83d2bfa7d40471087432875862b442a2ea1c464c65520530f017f662140385bf7ca459
SSDEEP

12288:TGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwHOWxj:TGGEdwORVb4iiX2tzGyG2okOWxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbab7870d055a226931dd241bffad38d_JaffaCakes118

Files

dbab7870d055a226931dd241bffad38d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0874cfdb835d77f14c75c5fd8000bf7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
LoadLibraryExA
GetModuleHandleA
GetACP
GlobalUnlock
LocalFree
GetLastError
FindAtomA
CloseHandle
LocalLock
GetConsoleAliasA
CreateFileMappingA
FindClose
HeapCreate
CreateFileA
Sleep
TlsGetValue
WaitForSingleObjectEx
GetCalendarInfoA
FreeEnvironmentStringsA

user32

DrawTextA
GetDC
DispatchMessageA
CascadeWindows
SetFocus
GetMessageA
GetDlgItem
CreateDialogParamA
GetIconInfo
DrawEdge
DefWindowProcA
CallWindowProcA
IsWindow
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ