a02e2e1f58ee16acae7849c3456d3293_JaffaCakes118 | Triage

Sharing

General

Target

a02e2e1f58ee16acae7849c3456d3293_JaffaCakes118
Size

392KB
MD5

a02e2e1f58ee16acae7849c3456d3293
SHA1

a66adf87eb592565a2579b0a119d93ee9bbd4635
SHA256

51c8a3f09509d35be122b24ea827de0097dae9ae6c5431e45950babf7a98ecc0
SHA512

9f93cfc2e9335e6c78bfcb870a61a5f488592bf459e53bbbf77291cfe7d2d6cec9663b629bbf2efa83f7a5cb3eb81f1c0239845136f05bdff876f0f635aa7397
SSDEEP

12288:KGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw5TN:KGGEdwORVb4iiX2tzGyG2oUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a02e2e1f58ee16acae7849c3456d3293_JaffaCakes118

Files

a02e2e1f58ee16acae7849c3456d3293_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af4223fa70e88c4a1c744a9f72b95e30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
GetACP
GetConsoleCP
LocalFree
HeapCreate
GetConsoleAliasA
LoadLibraryExA
FreeEnvironmentStringsA
TlsGetValue
FindClose
FindAtomA
GetModuleHandleA
WaitForSingleObjectEx
CreateFileMappingA
GlobalUnlock
CloseHandle
LocalLock
CreateFileA
GetCalendarInfoA

user32

DefWindowProcA
GetIconInfo
SetFocus
DrawTextA
CascadeWindows
GetMessageA
DispatchMessageA
DrawEdge
IsWindow
CreateDialogParamA
GetDC
GetDlgItem
CallWindowProcA
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ