ef53143fba2de15f15344778398f8c6f_JaffaCakes118 | Triage

Sharing

General

Target

ef53143fba2de15f15344778398f8c6f_JaffaCakes118
Size

813KB
MD5

ef53143fba2de15f15344778398f8c6f
SHA1

beb99bcf50d5b64b48f7a48a00dabda80d2d34ac
SHA256

67bb6d19a97bb7ed399dff3fe6dc994c61f4ac125cdc96de071b8a0182e5ecb1
SHA512

36d7424f5144cdee72bc19c9b54391c15f5b38e33c6bcb2b15d86d9a7084dba0cf8b519dfe31be4d64cd72dcce77a76d2a57fdf7532b6c479883ffecda5b7a12
SSDEEP

24576:V+ZFMrvOeK8NpBC686cvxVci5CgoDaBBVmXw:gZm7mizCxxDVmg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef53143fba2de15f15344778398f8c6f_JaffaCakes118

Files

ef53143fba2de15f15344778398f8c6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8409ae9aed67bb46306d86196035fc70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
FreeEnvironmentStringsA
LocalFree
GetACP
IsBadReadPtr
GetModuleHandleA
LocalLock
GetLastError
CreateEventA
FindClose
CloseHandle
WaitForSingleObject
CreateFileA
GetConsoleCP
LocalUnlock
HeapCreate
TlsGetValue
GetStdHandle
CreateFileMappingA
LoadLibraryExA

user32

EndDialog
SetFocus
DispatchMessageA
EmptyClipboard
ScrollWindow
GetDlgItem
IsWindow
GetIconInfo
GetMessageA
DefWindowProcA
CreateDialogParamA
GetDC
PostMessageA
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BERDecEoid
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ