fc796f5b3c4ee4daa094ed5c2cdd20b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc796f5b3c4ee4daa094ed5c2cdd20b4_JaffaCakes118
Size

393KB
MD5

fc796f5b3c4ee4daa094ed5c2cdd20b4
SHA1

7382f5e9d4056fbfbfa1dd7edd286845ed71efdc
SHA256

79a4cbb03537de4f67e8ccf798168cd099a569fb08af4c59ce4065043dc42052
SHA512

371c43d763a05a0f94fcac7108ea9fe2e6c0a1505dec33088746d6f8f242f4e3acca576067b6771557f9c9564d5315610db7e31668dfaff5eecbe8f107a631d7
SSDEEP

6144:7Gtxe6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn21zdf:ZdGppg0zj7Y8Sz96jdbsucLJudf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc796f5b3c4ee4daa094ed5c2cdd20b4_JaffaCakes118

Files

fc796f5b3c4ee4daa094ed5c2cdd20b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab2e037d9f0b792827421b94edaead61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
CreateFileMappingA
IsBadReadPtr
IsDebuggerPresent
CreateEventA
GetConsoleCP
FreeEnvironmentStringsA
GlobalLock
GetFullPathNameA
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
TlsGetValue
GetACP
LocalFree
GetLastError

user32

GetDC
IsWindow
GetIconInfo
SetFocus
GetDlgItem
EmptyClipboard
PostMessageA
DispatchMessageA
ScrollWindow
EndDialog
GetMessageA
DefWindowProcA
CreateDialogParamA
DrawIconEx

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ