a2ff498ee9017dc226d42ba4cba451be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2ff498ee9017dc226d42ba4cba451be_JaffaCakes118
Size

392KB
MD5

a2ff498ee9017dc226d42ba4cba451be
SHA1

a4037f807e18bfb6de58ca4bc44d2a9905701b4b
SHA256

9c487b91fd4450cc4a27f81e63fc67ab6046c35b9691187f732f30a5049bd1a8
SHA512

a8c729ec01fa6ec7debcf725947e82e123af7ebef8dc7a716cca6b29364daf78884c9e02819f81b64416b0b4b7f278aed82bd711f2578dbc50811ef573d53d41
SSDEEP

12288:EC7GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw1SE+:EC7GGEdwORVb4iiX2tzGyG2o0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2ff498ee9017dc226d42ba4cba451be_JaffaCakes118

Files

a2ff498ee9017dc226d42ba4cba451be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c95ada83b298a2e55e3a87c5db14378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WaitForSingleObjectEx
CreateFileMappingA
CloseHandle
GetACP
GetModuleHandleA
GlobalUnlock
CreateFileA
FreeEnvironmentStringsA
LocalFree
GetConsoleAliasA
LoadLibraryExA
GetCalendarInfoA
FindAtomA
TlsGetValue
HeapCreate
GetConsoleCP
FindClose
Sleep
LocalLock

user32

CascadeWindows
GetIconInfo
DefWindowProcA
GetDlgItem
IsWindow
SetFocus
DrawEdge
DrawTextA
CallWindowProcA
CreateDialogParamA
DispatchMessageA
GetMessageA
GetDC
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ