160b62275223bb009b3734f29f3e463c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160b62275223bb009b3734f29f3e463c_JaffaCakes118
Size

275KB
MD5

160b62275223bb009b3734f29f3e463c
SHA1

64c020e0ec2eb73c29668328da02c8fad640e29e
SHA256

66fb62abf6ff968402bfa6bd05ee783ae46b9bf710e3ad873d5a41923d9961e7
SHA512

647de9770f97bc7fe1874eb84c0018ec02dd27f7e7faacad692d66db6a88f2959fbfab8c55c39abd973da67645bb9ab519df0015eed79acaaab278d6b7d0d54c
SSDEEP

6144:sDsA0/t4VbhFNWLRQJqe8t97Qxu+iEvO4rIfrVSvtWomq:sgA84VbhcQJq1UOE2QIfhetWomq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160b62275223bb009b3734f29f3e463c_JaffaCakes118

Files

160b62275223bb009b3734f29f3e463c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1424912a6b8aa213914b4a996a4ee8df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
TlsGetValue
lstrlenW
GetModuleHandleA
ResumeThread
ReadFile
GetDriveTypeW
HeapCreate
FindAtomW
EnumCalendarInfoW
LocalFree
SetEvent
FindClose
EnterCriticalSection
SetLastError
GetNumberFormatW
GetPrivateProfileStringW
GetCurrentProcessId
GetConsoleAliasW
GetCurrentThreadId

user32

DispatchMessageA
GetSysColor
IsWindow
GetMenuInfo
DrawTextW
GetKeyboardType
GetCursorInfo
DispatchMessageA
CallWindowProcW
SetFocus
GetKeyState
GetClientRect
GetClassInfoA

wsnmp32

SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ