0c8df857489dd85b61ec230ebab37abb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c8df857489dd85b61ec230ebab37abb_JaffaCakes118
Size

737KB
MD5

0c8df857489dd85b61ec230ebab37abb
SHA1

3f2bb2cb1e9ff56bab4d0372413eaf82e5477a6b
SHA256

b0ac73bbb21b77202c13067ee3b7ecf72731e7901dc7862f7d336a0ee12dbec4
SHA512

d606603681e5188f4f291b12c556eb429675734b725855894d8e04a3f49ccba26d6fe3a59a7ab5b6fae6cc0c500d276b430fd6828d84a36775e7703120bd0383
SSDEEP

12288:Zk/uKRMZGHvlZm2F4HMq42YCAeQ7wpNCh98uJ8KNx02opHP+eSC7SvGsCh:2RMYPl4i4HMq42tQ7wK8c8K/02yHP9SQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8df857489dd85b61ec230ebab37abb_JaffaCakes118

Files

0c8df857489dd85b61ec230ebab37abb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e867fc79c2c96948e3cb9114a9b0941

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
HeapCreate
GetCurrentThreadId
ReadFile
GetDriveTypeW
CreateMailslotA
SetLastError
FindAtomW
GetCurrentProcessId
GetConsoleAliasW
GetModuleFileNameA
ResumeThread
GetModuleHandleA
FindClose
LocalFree
GetPrivateProfileStringW
EnterCriticalSection
EnumCalendarInfoW
SetEvent
lstrlenA

user32

IsWindow
GetClientRect
GetKeyboardType
GetMenuInfo
DispatchMessageA
GetKeyState
CallWindowProcW
DispatchMessageA
GetSysColor
GetClassInfoA
SetFocus
DrawTextW
GetCursorInfo

admparse

IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty
IsAdmDirty

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ