a0003b645a883a92f1c6caa260ab3eca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0003b645a883a92f1c6caa260ab3eca_JaffaCakes118
Size

789KB
MD5

a0003b645a883a92f1c6caa260ab3eca
SHA1

b0634b4585111405a77dd244fd0a10f5cfd92cf6
SHA256

fe0b8d6d84e5e743b3039713fab246ee9ac01576492e67ea389ff72fc3ea98ab
SHA512

cb635683fec16a9cc1fe26856203501c0aa8a52f6280be01202877901c78a7c38bac12ca3508b1772ddaca01792f2d7cff5f9516e62ebbd34df6800d8657200c
SSDEEP

24576:1hNe56m4zBj4dJEOeXQ78ItDNP8ZzfQm6Gg:1hY34DA7z4Rfd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0003b645a883a92f1c6caa260ab3eca_JaffaCakes118

Files

a0003b645a883a92f1c6caa260ab3eca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac16af1c30bebcbf3d592c33a9fd5061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCurrentThreadId
CreateMutexA
GlobalUnlock
VirtualQuery
CreateFileA
DeleteAtom
TerminateThread
LocalFree
GetStdHandle
CloseHandle
ReleaseMutex
lstrlenW
GetModuleHandleA
GetPriorityClass
SetEnvironmentVariableA
SetLastError
HeapCreate
TlsGetValue
LoadLibraryExW

user32

DrawMenuBar
SetFocus
CheckRadioButton
CallWindowProcA
GetIconInfo
DrawEdge
IsWindow
GetCaretPos
FillRect
DispatchMessageA
CopyRect
GetDlgItem
GetDC

ntshrui

IsPathSharedW
SetFolderPermissionsForSharing
IsPathSharedA
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 766KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ