ffaf30b21e987142cd443879f9e3af17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffaf30b21e987142cd443879f9e3af17_JaffaCakes118
Size

393KB
MD5

ffaf30b21e987142cd443879f9e3af17
SHA1

b090861ce471e85ca50df39303a1df6e564ddffd
SHA256

125ca4e6ec322e2c1f8bbc6e2bf6b0c4dee4a0325cc541c6a4339f1b33db9371
SHA512

d0e809fa043915a1f32a12bb6f2bd16b1dd4790accb677655a31ac089d635adffd34778ec4914cfc064f8612a26f5d253dff0f61506d5b83caf876712f5b9633
SSDEEP

12288:HW3KpJI6xj1dV9fJcEXW4OYIb5IiENCaGNPO:HWCb1dV9fJhXWGHNePO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffaf30b21e987142cd443879f9e3af17_JaffaCakes118

Files

ffaf30b21e987142cd443879f9e3af17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d040171e6e59ff81dc8448e8c5430be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GlobalUnlock
FindClose
CloseHandle
TlsGetValue
LocalLock
CreateFileA
WaitForMultipleObjects
Sleep
LoadLibraryExA
LocalFree
GetCalendarInfoA
FindAtomA
GetModuleHandleA
GetLastError
GetConsoleAliasA
CreateFileMappingA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

CallWindowProcA
CascadeWindows
GetIconInfo
IsWindow
SetFocus
DrawTextA
DefWindowProcA
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CreateDialogParamA
GetMessageA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ