a048fd4933e4c6580141971afd2aae21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a048fd4933e4c6580141971afd2aae21_JaffaCakes118
Size

393KB
MD5

a048fd4933e4c6580141971afd2aae21
SHA1

de6426bb1bbb33390e315d1a88f0ff3a10b51962
SHA256

98bd4ebc082709ebeddfa84b17712114cb2f7dfb032f4e5eef65eb9a2b000123
SHA512

5dc71b909b54ea04c797979010606325fabe0f354471b6d4d962ac313d3508ed1f689498898029b3325a3c1315230d7964b874945d1d2d2177d57526021e0dbf
SSDEEP

12288:Oi3KpJI6xj1dV9fJcEXW4OYIb5IiENCaak:OiCb1dV9fJhXWGHNqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a048fd4933e4c6580141971afd2aae21_JaffaCakes118

Files

a048fd4933e4c6580141971afd2aae21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c84ff2534b71fbf4f7a5a4e63f007cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
Sleep
GetConsoleAliasA
CreateFileMappingA
GetACP
FindClose
LocalLock
TlsGetValue
LocalFree
WaitForMultipleObjects
FindAtomA
HeapCreate
GetCalendarInfoA
FreeEnvironmentStringsA
GetConsoleCP
CreateFileA
GetLastError
LoadLibraryExA
CloseHandle
GlobalUnlock

user32

IsWindow
DrawEdge
SetFocus
GetDC
DefWindowProcA
DrawTextA
CallWindowProcA
GetDlgItem
GetMessageA
GetIconInfo
DispatchMessageA
CreateDialogParamA
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ