a02185248a29a587ebee21a8bad4bc8e_JaffaCakes118 | Triage

Sharing

General

Target

a02185248a29a587ebee21a8bad4bc8e_JaffaCakes118
Size

241KB
MD5

a02185248a29a587ebee21a8bad4bc8e
SHA1

e7fc07c46da0f340904f734bd5605e5be4c717c4
SHA256

5a52863043bc46e548162529797c7d5b9cc37723e92d9c112c0da6ba5d46b52a
SHA512

fda3a4e6039b4788738ef673fb0060fc807211ba04bc4c45633f56712ced49a9c53fb35d6423f844712dd3dd81eda5c201292d204a48b8d3124c5e44b8f44e65
SSDEEP

6144:f8ZaVM3UcahgDc/dnW6MKkncm7uKzcq3oVnvRh:f8MVy4V+KknJHcm4Zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a02185248a29a587ebee21a8bad4bc8e_JaffaCakes118

Files

a02185248a29a587ebee21a8bad4bc8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6cd8f74ea912046d0efa2f79b6166ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GlobalFree
GetCommState
VirtualAlloc
LocalSize
DeleteAtom
lstrcpyn
GlobalFindAtomA
GlobalCompact
GetStdHandle
CloseHandle
ClearCommBreak
GetProfileStringA
LoadResource
GetProcessHeap
GlobalLock
LoadLibraryExA
GlobalAddAtomA
RaiseException
GetOEMCP
ExitThread

user32

ReleaseDC
ShowWindow
GetWindowTextLengthA
GetForegroundWindow
GetClassInfoExA
CloseWindow
GetFocus
DrawEdge
IsIconic
GetParent
GetDC
GetActiveWindow
ValidateRect
GetWindowTextA
GetClassNameA
EndPaint
GetWindow
BeginPaint
RegisterClassA

wsock32

WSAStartup
WSAAsyncSelect
WSAIsBlocking
WSAGetLastError
WSACleanup

duser

GetStdColorF

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ