f6ec791b1e75deb8a39b2c81ef883a9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6ec791b1e75deb8a39b2c81ef883a9a_JaffaCakes118
Size

54KB
MD5

f6ec791b1e75deb8a39b2c81ef883a9a
SHA1

0166ae247e84bc7d64299ece4047cf5140a0977b
SHA256

b6561b959cf608f296e6956842b42dea2c4b2c80fd7277aceed93013cc29d51d
SHA512

c5ecd265dfad15a0fa4b0f1dc077aea159c5e0f21291e395b0c1b8ddde4f7018b95ff9d0b3512136667567dabcd014b6e108b25a043c9913cb701a6bc826aad2
SSDEEP

1536:lmNd3NXvXtkkwLLLL/VJxsMUju93loiF5azJ7:2tkksF3oiF5y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ec791b1e75deb8a39b2c81ef883a9a_JaffaCakes118

Files

f6ec791b1e75deb8a39b2c81ef883a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94b4a8a875e5482a8c4bacc6253a318c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
CreateFileA
GetConsoleCP
CloseHandle
FindClose
TlsGetValue
IsBadReadPtr
FreeEnvironmentStringsA
CreateFileMappingA
GetACP
HeapCreate
CreateEventA
GetLastError
IsDebuggerPresent
LoadLibraryExA
LocalLock
GetStdHandle
LocalFree
GetFullPathNameA
GetModuleHandleA

user32

GetDC
GetMessageA
SetFocus
ScrollWindow
GetIconInfo
DispatchMessageA
EndDialog
EmptyClipboard
PostMessageA
GetDlgItem
DefWindowProcA
CreateDialogParamA
IsWindow
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ