262c4d0c97ed3251036916fac8386f7f_JaffaCakes118 | Triage

Sharing

General

Target

262c4d0c97ed3251036916fac8386f7f_JaffaCakes118
Size

368KB
MD5

262c4d0c97ed3251036916fac8386f7f
SHA1

bb11e1bb2a2d9c2fa7d8819dc533c797927ed435
SHA256

6904e95606c33013a5121a004064b85b1f99c0a39e25b66e2bf5e7717d97bb61
SHA512

04cb48b11d9c7de75c8d6d8dcb45d62acdfc09224b21e009236b8b32d0c22f05c5ee46240b8766140199b39945f8ac4d91d5f952563d6287b9198d968cff2626
SSDEEP

6144:3v3yRMghrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:3vCRMGrpDneFNzino7IUHybPzQjUeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
262c4d0c97ed3251036916fac8386f7f_JaffaCakes118

Files

262c4d0c97ed3251036916fac8386f7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c18b8156c7daeddce13b5f20927ec250

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
SetEvent
ReadFile
TlsGetValue
ResumeThread
GetNumberFormatW
FindClose
GetCurrentProcessId
EnterCriticalSection
CreateEventW
GetModuleHandleA
GetPrivateProfileStringA
FindAtomW
GetConsoleAliasW
HeapCreate
SetLastError
lstrlenW
GetCurrentThreadId
GetDriveTypeW
LocalFree

user32

DispatchMessageA
GetKeyboardType
GetKeyState
GetCursorInfo
GetClientRect
GetSysColor
DispatchMessageA
GetClassInfoA
IsWindow
GetMenuInfo
DrawTextA
CallWindowProcW
SetFocus

unimdmat

UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ