fbce91ae5f1b2b5e7389324db9f5cafa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbce91ae5f1b2b5e7389324db9f5cafa_JaffaCakes118
Size

56KB
MD5

fbce91ae5f1b2b5e7389324db9f5cafa
SHA1

162d3dc052096cb7753081697b3eadb164ae08a7
SHA256

54a467a7080a38d6c106210374aca9d6b6ed4dd9a70a63b54222cf6d08b54ce3
SHA512

2b9bcdb55c504df45cbe51a768efdb2e8038b0b722c0487b6cbdd9d3987709c746850bf3a92f93e434b728a70250b9b6511b1c1dc8b7ae0bfd5daf01265bcbeb
SSDEEP

1536:irQibPvW1Or1lUfHS/lFc9LXqZz9MdR7N0foXW:ivvW1Or1lUfHS/26OTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbce91ae5f1b2b5e7389324db9f5cafa_JaffaCakes118

Files

fbce91ae5f1b2b5e7389324db9f5cafa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75d4399c52d16d047e93c8a501e2f484

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
FindAtomA
FindClose
GetModuleHandleA
LoadLibraryExA
LocalLock
CreateFileA
Sleep
CreateFileMappingA
GetLastError
WaitForMultipleObjects
HeapCreate
CloseHandle
TlsGetValue
GetACP
LocalFree
FreeEnvironmentStringsA
GetConsoleAliasA
GetConsoleCP
GetCalendarInfoA

user32

DispatchMessageA
DrawTextA
DefWindowProcA
CascadeWindows
CallWindowProcA
GetDlgItem
SetFocus
CreateDialogParamA
GetMessageA
DrawEdge
GetIconInfo
GetDC
IsWindow
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ