e18a081683b623dddd5e43ee213dbc44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e18a081683b623dddd5e43ee213dbc44_JaffaCakes118
Size

813KB
MD5

e18a081683b623dddd5e43ee213dbc44
SHA1

e398464f2a6c484ec02a140927415c4acfc88d03
SHA256

55516ae58dae9e100552b0ad77cc43d74b69edd8d836880b580926ef33bd5835
SHA512

c9680a9aff8f25aad7a84f32ea07b54d9ac28213bc845cb1920cc423b721c8bc742378b6c797582a03c4f8b98fe20cf5008093e52b536000e5d6c0e599195911
SSDEEP

24576:EN89IUKVRZTDbcDkjrLkJYLrVBhxdSJ9HrEV:EqXcTTDAIgy3hxYSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e18a081683b623dddd5e43ee213dbc44_JaffaCakes118

Files

e18a081683b623dddd5e43ee213dbc44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

722347476049f2c1cb8fd8012d62ff4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetCalendarInfoA
WaitForSingleObject
CreateFileA
LocalFree
GetACP
CreateFileMappingA
LocalUnlock
GetModuleHandleA
FindAtomA
IsDebuggerPresent
HeapCreate
FindClose
FreeEnvironmentStringsA
GetConsoleAliasA
CloseHandle
LocalLock
GetConsoleCP
LoadLibraryExA
GetLastError

user32

GetMessageA
ScrollWindow
CreateDialogParamA
GetDC
IsWindow
PostMessageA
CallWindowProcA
SetFocus
GetDlgItem
DispatchMessageA
DefWindowProcA
GetIconInfo
CascadeWindows
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ