a830b2c360a29f4fc5e4ae0c14217edb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a830b2c360a29f4fc5e4ae0c14217edb_JaffaCakes118
Size

55KB
MD5

a830b2c360a29f4fc5e4ae0c14217edb
SHA1

0511428ee56a13e1c676d67934f58b435e643ecd
SHA256

063dd37014a6a234f39ae1008bb55bc5a257ae4334bf9f45622ce23915b2bbc7
SHA512

1999950c0241e82f89b519fb006e3e852ccaa0f7ede81fb15f3ab3a9c0b520c7454a0c7d184d5217a4f6e8582bc4a2a57ad8f8e9cb47ac9e89868ade031138e1
SSDEEP

1536:UAcfBsQGPbPF+kUkNrwTqjEgEtQF4LEZ+jqCls8vjy0px:UHsQGPbPF+kUkNrwTqyG4Ndls+y0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a830b2c360a29f4fc5e4ae0c14217edb_JaffaCakes118

Files

a830b2c360a29f4fc5e4ae0c14217edb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44f95695acf04e3e8e441054f16fcdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
IsDebuggerPresent
HeapCreate
CreateFileA
WaitForSingleObject
FreeEnvironmentStringsA
GetCalendarInfoA
GetConsoleAliasA
LocalUnlock
CloseHandle
GetConsoleCP
LocalFree
FindAtomA
GetACP
LocalLock
LoadLibraryExA
FindClose
CreateFileMappingA
GetModuleHandleA
TlsGetValue

user32

DrawEdge
DispatchMessageA
CreateDialogParamA
SetFocus
DrawTextA
GetMessageA
CallWindowProcA
GetDC
GetDlgItem
DefWindowProcA
GetIconInfo
IsWindow
CascadeWindows
DrawIconEx

msasn1

ASN1BERDecEoid
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ