df186d610abb7db0d112b549c0160a38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df186d610abb7db0d112b549c0160a38_JaffaCakes118
Size

55KB
MD5

df186d610abb7db0d112b549c0160a38
SHA1

45d91110c173aa23c82b60155a2eedc65958b352
SHA256

df49d304a49c90c9391640f053861637e0b39deefecc9881c0fd2896df1d9691
SHA512

319753f7ca3acce1993113aa0a06c109146e0059e61e5fd14943031c4a63bff61ae41f122580b6cfafc9a590e5bdd55af5995df8330782db58edeb20abce0f43
SSDEEP

1536:E8d+QzM+e8tQowfwjsRWJxHk1umVJDBDZx3/arMWvrO+8HvWUMAO7:Ee+QzM+e8tQowfwjsRWJxHkbBjWvrOnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df186d610abb7db0d112b549c0160a38_JaffaCakes118

Files

df186d610abb7db0d112b549c0160a38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66aa2aee3c7d7216fe437bdeba31c2a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
Sleep
LoadLibraryExA
FindAtomA
GetACP
GetCalendarInfoA
GetConsoleCP
LocalFree
FreeEnvironmentStringsA
GetConsoleAliasA
GlobalUnlock
GetLastError
GetModuleHandleA
LocalLock
HeapCreate
CreateFileA
TlsGetValue
CloseHandle
FindClose
CreateFileMappingA

user32

CreateDialogParamA
DrawEdge
GetIconInfo
IsWindow
GetDlgItem
SetFocus
GetMessageA
CascadeWindows
DrawTextA
DefWindowProcA
CallWindowProcA
DispatchMessageA
GetDC
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecNull
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ