ded245118539f59925ab2470f4a6ff9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded245118539f59925ab2470f4a6ff9f_JaffaCakes118
Size

391KB
MD5

ded245118539f59925ab2470f4a6ff9f
SHA1

05834bba3586fc07bc45197c2b85598fa82e8671
SHA256

690260c9ae05b728589a4e4038333e9591d70405503ca3f7e325d229d9c32bdc
SHA512

50744615299d984278ee08a1d86b87496ff950423348a017e50d139fe68f74caa0720734b633434dc2455c01f5a85f7174a16f23e2dd2e530f9f9b7b09bbbc21
SSDEEP

6144:St4v6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2Oi9J:jdGppg0zj7Y8Sz96jdbsucLJy9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded245118539f59925ab2470f4a6ff9f_JaffaCakes118

Files

ded245118539f59925ab2470f4a6ff9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f98ca1b74d944fb250cbde3846a8fcb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FreeEnvironmentStringsA
FindClose
GetConsoleCP
CloseHandle
CreateEventA
LocalLock
GetACP
LoadLibraryExA
IsBadReadPtr
GetStdHandle
CreateFileA
IsDebuggerPresent
GetModuleHandleA
CreateFileMappingA
LocalUnlock
GetLastError
GetFullPathNameA
TlsGetValue
LocalFree

user32

EndDialog
EmptyClipboard
GetDC
DefWindowProcA
CreateDialogParamA
IsWindow
SetFocus
DispatchMessageA
PostMessageA
ScrollWindow
GetDlgItem
GetIconInfo
GetMessageA
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncFlush
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ