eb01b74961d7f2e1dff7fbb488e7dbe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb01b74961d7f2e1dff7fbb488e7dbe8_JaffaCakes118
Size

374KB
MD5

eb01b74961d7f2e1dff7fbb488e7dbe8
SHA1

430293bf3df38932de8ec56b8c03b4b841e8838e
SHA256

ad66d9e1b00969dec382fb55ec58c839891c34fe9776c83f11680f983c8c155e
SHA512

92db710160f5c66a5e7491dfb03c911df2ac5733553d266eb02f690a49dd94efab0eb24547a1b251f76d62600ad8ea19d457f2b4896fa939d9f5ee6950bd62e9
SSDEEP

6144:7RT9T6KfhautcVYYnR8ommg7u/Cg0mAJRjpw68VVxjo/uMj6NDu1miMlv5XmYVPo:F9TNrmN82Wu/x6n8n7MPmpln/wMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb01b74961d7f2e1dff7fbb488e7dbe8_JaffaCakes118

Files

eb01b74961d7f2e1dff7fbb488e7dbe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f077d5c061020460534a52f028c24c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
LoadLibraryExA
LocalFree
LocalLock
GetConsoleCP
Sleep
HeapCreate
FindClose
GetLastError
GetCalendarInfoA
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
TlsGetValue
CreateFileMappingA
FindAtomA
GetModuleHandleA
GetConsoleAliasA

user32

DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
GetMessageA
DrawTextA
SetFocus
GetIconInfo
CascadeWindows
IsWindow
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ