fbc38ae37717b57b4bc6c478ad88d3c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbc38ae37717b57b4bc6c478ad88d3c4_JaffaCakes118
Size

392KB
MD5

fbc38ae37717b57b4bc6c478ad88d3c4
SHA1

60cbfd3d4e0bedbf7c759ea19dfcccacf503cdf0
SHA256

12a3b4861a4a39e5e7440ae35b1bcebadaa8bbb9d6d7cbe4c61a27c3cc230b0d
SHA512

9b57dd7cde1658b4c436daf9122940b0074edd86caf8e6f3a748355559daabd96640407932d34a023b21a6c31091f3ba69cc1cd85d90d5fe2b02085a3c8f7205
SSDEEP

12288:5GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwrBO:5GGEdwORVb4iiX2tzGyG2oL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc38ae37717b57b4bc6c478ad88d3c4_JaffaCakes118

Files

fbc38ae37717b57b4bc6c478ad88d3c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70a9251dfa606f2555fc7a1a912798ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObjectEx
HeapCreate
FindClose
GlobalUnlock
LoadLibraryExA
CloseHandle
GetConsoleAliasA
CreateFileA
Sleep
GetConsoleCP
LocalLock
LocalFree
GetModuleHandleA
FreeEnvironmentStringsA
FindAtomA
TlsGetValue
CreateFileMappingA
GetCalendarInfoA
GetACP

user32

DefWindowProcA
CascadeWindows
CreateDialogParamA
SetFocus
GetDC
CallWindowProcA
DrawTextA
GetDlgItem
IsWindow
DrawEdge
GetIconInfo
GetMessageA
DispatchMessageA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ