fbaa844c3e044813e6a85a09af465eb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbaa844c3e044813e6a85a09af465eb0_JaffaCakes118
Size

393KB
MD5

fbaa844c3e044813e6a85a09af465eb0
SHA1

8d3bd14e8b89fd834c8b02745559d0751e654254
SHA256

0d35b48fd6e3e1b716262875dd84588d9ec79d771bb21cd0c149e1d47c688f05
SHA512

3aadcfe8f8c8272ee8465e1538b8fc30b0d51dcf59b90c384b86258c8b854847c561aacefeb18008bdd8dc60c53867057e58f24b0a2d0b9a71423713c509602e
SSDEEP

12288:ITY3KpJI6xj1dV9fJcEXW4OYIb5IiENCa0qxG:IMCb1dV9fJhXWGHNkCG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbaa844c3e044813e6a85a09af465eb0_JaffaCakes118

Files

fbaa844c3e044813e6a85a09af465eb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcd1d3899dddfd8cc62cbca3f15206c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
GetConsoleCP
GetACP
FreeEnvironmentStringsA
GetConsoleAliasA
TlsGetValue
LocalLock
GetCalendarInfoA
GlobalUnlock
HeapCreate
LocalFree
FindAtomA
FindClose
CloseHandle
CreateFileMappingA
WaitForMultipleObjects
GetModuleHandleA
Sleep
LoadLibraryExA

user32

SetFocus
DrawEdge
GetIconInfo
DefWindowProcA
DispatchMessageA
IsWindow
GetDlgItem
CascadeWindows
GetMessageA
GetDC
DrawTextA
CallWindowProcA
CreateDialogParamA
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ