dc7a9e4087f22ad864d3f556a6422c6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc7a9e4087f22ad864d3f556a6422c6d_JaffaCakes118
Size

393KB
MD5

dc7a9e4087f22ad864d3f556a6422c6d
SHA1

f506f1ec81e596125c5d1a9b656f1f16cef5f107
SHA256

303eb5e05f39107b13c574420188ff193ccef0a888f7dea5d696063badc497b9
SHA512

8b1f6af14132f573b3fb60a6a37b2d932ebf02d21ca02f5e4315e922a84ee109d1eadaa83b4133f03901d476278d8a0f1951d7ab2cf1c90656cfde2fa1521dee
SSDEEP

6144:nvt86S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2qDE:AdGppg0zj7Y8Sz96jdbsucLJDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7a9e4087f22ad864d3f556a6422c6d_JaffaCakes118

Files

dc7a9e4087f22ad864d3f556a6422c6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

562686003733b507807ade708030e5cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
CreateEventA
GetModuleHandleA
FindClose
IsDebuggerPresent
GlobalLock
LocalFree
CloseHandle
GetACP
CreateFileA
LoadLibraryExA
GetStdHandle
TlsGetValue
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetConsoleCP
LocalUnlock
CreateFileMappingA
GetFullPathNameA

user32

GetIconInfo
GetDC
DefWindowProcA
EndDialog
ScrollWindow
IsWindow
GetMessageA
PostMessageA
GetDlgItem
CreateDialogParamA
DispatchMessageA
SetFocus
EmptyClipboard
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ