fb5a188efd1d67babea3c57d54a0fb12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb5a188efd1d67babea3c57d54a0fb12_JaffaCakes118
Size

391KB
MD5

fb5a188efd1d67babea3c57d54a0fb12
SHA1

daac5d1ad1d70cf9c081457e53368eae618b42f8
SHA256

30e845da5331a4a8b8ce7bedf572168d439266b8182b998d6cb21fec52d576fd
SHA512

336b6c21350fab0989198a1e0a703b06a7577e62f88dc683572734718c0777d543c9b5a00042c50243487d519f81f3387bc65b9174ecaa592aa30ee1a384f15a
SSDEEP

12288:NqHp6Q14ayTdSp+QrXsN0B5j4NI22n//pQjH:NqZ7yhaRXs2QqncH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5a188efd1d67babea3c57d54a0fb12_JaffaCakes118

Files

fb5a188efd1d67babea3c57d54a0fb12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c01b8451bf4e92dcc711c6f6777e482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObject
GetConsoleAliasA
LocalFree
GetACP
CreateFileMappingA
GetModuleHandleA
HeapCreate
GetCalendarInfoA
LocalUnlock
GetConsoleCP
LocalLock
FindAtomA
CloseHandle
TlsGetValue
FreeEnvironmentStringsA
IsDebuggerPresent
CreateFileA
FindClose
LoadLibraryExA

user32

GetDC
CascadeWindows
CallWindowProcA
GetMessageA
DefWindowProcA
GetIconInfo
IsWindow
ScrollWindow
GetDlgItem
CreateDialogParamA
PostMessageA
SetFocus
DispatchMessageA
DrawIconEx

msasn1

ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ