dd96ea77bc4a15060bb7ce96593ad24d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd96ea77bc4a15060bb7ce96593ad24d_JaffaCakes118
Size

391KB
MD5

dd96ea77bc4a15060bb7ce96593ad24d
SHA1

18a59adbb57744d2e540c5b6dfb16b21e406da5a
SHA256

626409e5af6c2bbfe10568ab9e5c236dae39aebd47fe62b66913bd265fbc9b15
SHA512

e9e8101fa5feee1d3fde28b0f17d7f2191341c39684dc610fcc646f819711824ef4fa7a7c4df7a997279fb28fe2ebd07e24b072903794849d3afb558eda45a44
SSDEEP

6144:GtH6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2WP5Ch+Iw:GdGppg0zj7Y8Sz96jdbsucLJLPcU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd96ea77bc4a15060bb7ce96593ad24d_JaffaCakes118

Files

dd96ea77bc4a15060bb7ce96593ad24d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5df4ff7d985522cf0cc017eefb5d4577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
LocalUnlock
FindClose
CloseHandle
TlsGetValue
LocalLock
CreateFileA
GetFullPathNameA
IsDebuggerPresent
LoadLibraryExA
LocalFree
IsBadReadPtr
GetStdHandle
GetModuleHandleA
GetLastError
CreateEventA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

EmptyClipboard
EndDialog
GetIconInfo
IsWindow
SetFocus
PostMessageA
DefWindowProcA
GetDlgItem
DispatchMessageA
GetDC
ScrollWindow
CreateDialogParamA
GetMessageA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecBool

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ