eee8eca6b5859b7dca954ffb34ada6de_JaffaCakes118 | Triage

Sharing

General

Target

eee8eca6b5859b7dca954ffb34ada6de_JaffaCakes118
Size

393KB
MD5

eee8eca6b5859b7dca954ffb34ada6de
SHA1

cfeb901fb53abb1d0173b81713dcb9bcc3fbd432
SHA256

fd963b688b045b800b03d7b3150041a9efe1fd3475a2ea08774325b68df6fd67
SHA512

2ef826167bda65f60bc821f15f6a588e08d5a16c70b3c50cbec22638900d14f9d19ba544749dfdad6d97c3b49278362030a2bd0a321c8aadf7da115a970e137e
SSDEEP

12288:9W3KpJI6xj1dV9fJcEXW4OYIb5IiENCaGNPO:9WCb1dV9fJhXWGHNePO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee8eca6b5859b7dca954ffb34ada6de_JaffaCakes118

Files

eee8eca6b5859b7dca954ffb34ada6de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d040171e6e59ff81dc8448e8c5430be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
TlsGetValue
LocalLock
CreateFileA
WaitForMultipleObjects
Sleep
LoadLibraryExA
LocalFree
GetCalendarInfoA
FindAtomA
GetModuleHandleA
GetLastError
GetConsoleAliasA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

CallWindowProcA
CascadeWindows
GetIconInfo
IsWindow
SetFocus
DrawTextA
DefWindowProcA
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CreateDialogParamA
GetMessageA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ