5a9d4ff1c1216ca098d52be647eac078_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9d4ff1c1216ca098d52be647eac078_JaffaCakes118
Size

367KB
MD5

5a9d4ff1c1216ca098d52be647eac078
SHA1

a9232db03bfe7760bf154c102eaa8868b5864d4f
SHA256

158bddeab2dc7f6bd480d47de6deb8055846edd6d32eb4e27fda664362772e6a
SHA512

143662d9762eba01ef6121a6e882538856c833b84f161b991f7d4dcebd106f23d65d1b619ecd999f3f0c5f339d88e210e4c92dbe36419b5c80dcdb1aaa4a72a0
SSDEEP

6144:ZXveRMbPa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:Z/eRMbSx4ojf51aTcK0NEQUd0op3QlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9d4ff1c1216ca098d52be647eac078_JaffaCakes118

Files

5a9d4ff1c1216ca098d52be647eac078_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1717322dd08ef35d08a1ecc19d03b170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetConsoleAliasW
GetFileAttributesA
LocalFree
EnumCalendarInfoW
SetEvent
GetDriveTypeW
ResumeThread
GetPrivateProfileStringW
GetCurrentProcessId
EnterCriticalSection
SetLastError
GetModuleHandleA
FindAtomW
lstrlenA
FindClose
ReadFile
CreateMailslotA
GetCurrentThreadId
HeapCreate

user32

DispatchMessageA
GetSysColor
SetFocus
DrawTextW
GetKeyState
GetClientRect
GetCursorInfo
GetClassInfoA
GetMenuInfo
DispatchMessageA
CallWindowProcW
IsWindow
GetKeyboardType

admparse

IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ