de1b8b76126daf66c8b4c81aa51157d7_JaffaCakes118 | Triage

Sharing

General

Target

de1b8b76126daf66c8b4c81aa51157d7_JaffaCakes118
Size

813KB
MD5

de1b8b76126daf66c8b4c81aa51157d7
SHA1

a5b1531c06d5260d36bd48dc5b64055f57841fe6
SHA256

18e21bd7d848b1dbf7eca950aa328ba44511ea1435edc2db7b57d9dcec49b514
SHA512

3e416fb586b2de2b9bb9205012bfd7867d464ce75757e7bab88547b343e71316981d7fe330e66343fa3783033ee8af32f5013f39cb5aca16de1b7ce2f8d89600
SSDEEP

24576:iTU+bYAS5nGuosJ8qHny3VCWd6Bq93D8BD/FUrmXJ2jpDPRH:izbYAzuosJdHnqVCWXvrm+pDPRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1b8b76126daf66c8b4c81aa51157d7_JaffaCakes118

Files

de1b8b76126daf66c8b4c81aa51157d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

530d83e293d17b9fc2b4a8da778fc051

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetFullPathNameA
GetStdHandle
GetModuleHandleA
FreeEnvironmentStringsA
IsDebuggerPresent
LocalUnlock
LoadLibraryExA
LocalLock
CreateFileMappingA
CreateEventA
GetACP
HeapCreate
CloseHandle
CreateFileA
TlsGetValue
GetConsoleCP
GetLastError
FindClose
LocalFree

user32

GetMessageA
PostMessageA
GetIconInfo
CreateDialogParamA
IsWindow
ScrollWindow
GetDC
SetFocus
EmptyClipboard
DefWindowProcA
EndDialog
GetDlgItem
DispatchMessageA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ