a144b4a55de89b461b19ad0ae851cb01_JaffaCakes118 | Triage

Sharing

General

Target

a144b4a55de89b461b19ad0ae851cb01_JaffaCakes118
Size

373KB
MD5

a144b4a55de89b461b19ad0ae851cb01
SHA1

7bdbc7efb2b2b9e44cc1015b4ecedf6e83ed372f
SHA256

5f8421584a9368139f0a231d0b8b57a7a31c08fab0baa90a48f30682f0f44653
SHA512

0eaf6b4d9da444e957d1a658f6cee152e1aae4ef3a857c7f604f9b51b560e813743d7abc134ad4df3a252df02d9b884c75bf2ebe3666aca792c930fa59a8b258
SSDEEP

6144:+nXNAi2UWSYe3LIt1hJom7ljC9camLmKjOmrxKEYKNWl6ZCJYgvpkOT2r:+XSbUHYGLCGEl+ctemrwCNq6uYgvpZTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a144b4a55de89b461b19ad0ae851cb01_JaffaCakes118

Files

a144b4a55de89b461b19ad0ae851cb01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b6681278c43afe384bc794f2d54150e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCalendarInfoA
Sleep
FindClose
WaitForSingleObjectEx
FreeEnvironmentStringsA
TlsGetValue
LoadLibraryExA
GlobalUnlock
GetModuleHandleA
GetConsoleCP
LocalLock
FindAtomA
LocalFree
CloseHandle
HeapCreate
GetACP
GetConsoleAliasA
CreateFileA
CreateFileMappingA

user32

CallWindowProcA
SetFocus
GetDC
GetDlgItem
CreateDialogParamA
DrawEdge
GetMessageA
IsWindow
DefWindowProcA
DrawTextA
GetIconInfo
CascadeWindows
DispatchMessageA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ