4aa7aa248b6739dd1180fa6b10202705_JaffaCakes118 | Triage

Sharing

General

Target

4aa7aa248b6739dd1180fa6b10202705_JaffaCakes118
Size

159KB
MD5

4aa7aa248b6739dd1180fa6b10202705
SHA1

6968491a62396631b4b72978796fd72df9f799ba
SHA256

b2d4b62d3216f2b84949b5a1eb063ccab815d389bf9792ff8bb9d5c17770fe7e
SHA512

7b4194ca49ed2dc8cd025fe7374c5481a02dad2902ff532d9162d34aa991935f3021b7c9e29c77ba92db2a5320ba1624ea75299628b25a7fd1b1fd62405009b1
SSDEEP

3072:Izi+CywNpn18IK8dE55l5Wo/pMwrG8uXOwmqj8ILK4qcsghQ:6ujn1y8e5IwK89WK4rQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aa7aa248b6739dd1180fa6b10202705_JaffaCakes118

Files

4aa7aa248b6739dd1180fa6b10202705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37178fcce0f5c0b94989644f71a5aa2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
CreateFileMappingA
GetModuleHandleA
GetConsoleCP
CloseHandle
FreeEnvironmentStringsA
WaitForSingleObject
LocalUnlock
LocalFree
LocalLock
CreateFileA
GetLastError
HeapCreate
IsDebuggerPresent
TlsGetValue
GetConsoleAliasA
FindAtomA
FindClose
GetACP
GetCalendarInfoA

user32

PostMessageA
DefWindowProcA
DispatchMessageA
CallWindowProcA
IsWindow
GetDlgItem
GetDC
CreateDialogParamA
SetFocus
ScrollWindow
CascadeWindows
GetMessageA
GetIconInfo
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ