a98787b34a449869fb390226b3a0aac7_JaffaCakes118 | Triage

Sharing

General

Target

a98787b34a449869fb390226b3a0aac7_JaffaCakes118
Size

392KB
MD5

a98787b34a449869fb390226b3a0aac7
SHA1

0a5347965e00c4924e8f5c5416929d377f114b1d
SHA256

5d64dbc197b1616532ddba9d6475a1e0b91bb63d70793ef16f45a7b30b8cd715
SHA512

4e78263e70b0cde05cc200805ba2cf2a1348af3508617a5871bebbdce93acb9bb9852ad03e74a36e99bb0174d8ac011d71cda92c6976cb15d7b366cabe3e8656
SSDEEP

12288:ppRGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw9+2A06:ppRGGEdwORVb4iiX2tzGyG2o81D6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a98787b34a449869fb390226b3a0aac7_JaffaCakes118

Files

a98787b34a449869fb390226b3a0aac7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39fa74daf25d69bfe75d8ec759c0df64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
GetLastError
TlsGetValue
LoadLibraryExA
LocalLock
GetConsoleCP
LocalFree
GetACP
FindAtomA
FindClose
FreeEnvironmentStringsA
CreateFileMappingA
GetCalendarInfoA
Sleep
HeapCreate
GlobalUnlock
CreateFileA
GetModuleHandleA
WaitForSingleObjectEx
CloseHandle

user32

DrawTextA
IsWindow
GetMessageA
GetDC
DispatchMessageA
SetFocus
DefWindowProcA
CallWindowProcA
CascadeWindows
CreateDialogParamA
GetDlgItem
GetIconInfo
DrawEdge
MessageBoxA

msasn1

ASN1BERDecNull
ASN1BERDecEoid
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ