ab4d8f3243749674852b1bde9c630b0e_JaffaCakes118 | Triage

Sharing

General

Target

ab4d8f3243749674852b1bde9c630b0e_JaffaCakes118
Size

813KB
MD5

ab4d8f3243749674852b1bde9c630b0e
SHA1

3db445e45488bca35b30829f6ecd9e1a23c43aa8
SHA256

3fc053e6813f82ee3cf797e70815c309fb9f069e224d826c669d4f007c73b6d4
SHA512

d91937c7af0875d81c4446cdfe07e7d9cffaf5ae7b069fc3dcfcd8b2c0492d557fa03cd87938bc3c24c6490c46c902f7d439fbe69bb1eb0428ccaa04d01d2e69
SSDEEP

24576:Tav/7mmPA6zHIK3eiwAgoEShgC+0Y3Y2Cf/:Ov/7mmxaoRg5TQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab4d8f3243749674852b1bde9c630b0e_JaffaCakes118

Files

ab4d8f3243749674852b1bde9c630b0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8657ad3a5d5524b9707c1777fcc095d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetModuleHandleA
LoadLibraryExA
GetACP
FreeEnvironmentStringsA
IsBadReadPtr
CreateFileMappingA
GetFullPathNameA
IsDebuggerPresent
GetStdHandle
GetLastError
LocalLock
TlsGetValue
GetConsoleCP
CreateEventA
CloseHandle
FindClose
HeapCreate
CreateFileA
LocalUnlock

user32

GetMessageA
GetDC
SetFocus
EmptyClipboard
DefWindowProcA
GetIconInfo
DispatchMessageA
PostMessageA
ScrollWindow
IsWindow
EndDialog
CreateDialogParamA
GetDlgItem
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecBool
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ