a9d3898dcc00c1052b310b4f537fe8fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9d3898dcc00c1052b310b4f537fe8fc_JaffaCakes118
Size

89KB
MD5

a9d3898dcc00c1052b310b4f537fe8fc
SHA1

65a7e6fa7b6d905c4766a56ef6ecf83769d4dfda
SHA256

7d447a29bcc4f505861d6b516d7d28e16d224e70b65ea0132c4944345a57b256
SHA512

3521f55903807717bed543c5af0c970dbbe61432db282aba372242fe401060985bcd244025dbce324d90270cfc7483ac7ab73f1cb87c830ba503aa46b80e753a
SSDEEP

1536:3Gv2IwnQhAhRGUJ8MPCzLox6qrOQRMybDU6TMVZmLwZk+x8GCMioNZ5MVaLYLLc/:s5QzRMQiZk+YK5hLYXcf/YCXRmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9d3898dcc00c1052b310b4f537fe8fc_JaffaCakes118

Files

a9d3898dcc00c1052b310b4f537fe8fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23c44190af68109817de9f97ae8c551f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
FindAtomW
GetConsoleAliasW
GetModuleHandleA
SetLastError
EnterCriticalSection
CreateMailslotA
GetCurrentProcessId
GetCurrentThreadId
ResumeThread
GetDriveTypeW
EnumCalendarInfoW
GetPrivateProfileStringW
GetModuleFileNameA
SetEvent
lstrlenA
FindClose
HeapCreate
GetFileAttributesA
ReadFile

user32

CallWindowProcW
DrawTextW
GetClientRect
GetKeyboardType
GetKeyState
DispatchMessageA
SetFocus
GetSysColor
DispatchMessageA
GetCursorInfo
IsWindow
GetMenuInfo
GetClassInfoA

admparse

IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ