a80973d8ee1ce2c1a7f576e794816154_JaffaCakes118 | Triage

Sharing

General

Target

a80973d8ee1ce2c1a7f576e794816154_JaffaCakes118
Size

373KB
MD5

a80973d8ee1ce2c1a7f576e794816154
SHA1

96bd740f883123e67825d5f7c8d4a55d06ff38fa
SHA256

798db724d4d5686e7bf1fe3069ea2557e641ceb2e6c2a8c26b4703082c7568fb
SHA512

c4beba7e83a8840d87d058ad19b912aff90e53470855802bc647286f21fd31ea78e5b85ab181f41204c6fe646ae3f5d3fb65c296474606736f97169b12d73690
SSDEEP

6144:+Ah0VBaQ28tlJBNati3UbPin5Vr0t4/NTV/+e/BCpIeJNgzTIIlR6lRs:+I0VwQ2837Nsi0Y5VIt4/NT1+e/opI42

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a80973d8ee1ce2c1a7f576e794816154_JaffaCakes118

Files

a80973d8ee1ce2c1a7f576e794816154_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb8961995d94a3c2665266c9a48c13d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
TlsGetValue
Sleep
CreateFileMappingA
GetACP
GlobalUnlock
FindClose
CreateFileA
GetLastError
WaitForSingleObjectEx
GetModuleHandleA
CloseHandle
GetConsoleCP
GetCalendarInfoA
LocalFree
FindAtomA
HeapCreate
LoadLibraryExA
GetConsoleAliasA
FreeEnvironmentStringsA

user32

CreateDialogParamA
GetDC
DefWindowProcA
SetFocus
DrawTextA
GetMessageA
CallWindowProcA
DispatchMessageA
GetIconInfo
CascadeWindows
DrawEdge
GetDlgItem
IsWindow
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ