06055951e4ce0dd7cb2da0c68259848f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06055951e4ce0dd7cb2da0c68259848f_JaffaCakes118
Size

40KB
MD5

06055951e4ce0dd7cb2da0c68259848f
SHA1

b12a9feb7fd6735280f3d81cc0be42d21acd8431
SHA256

a69a8bbb839bf31a6f0da261bc9d244625511c6062f9ddc031b80f7531c66d96
SHA512

4d541ba062eb04bb2901a16dfd1bc39363336778d1842943168df96371fd7068ae859e292437faa1860d8afb202465a34f99bb796da1007dedec77ceb35b2f63
SSDEEP

192:DHnONE4c71+b0qN2gy5VA3+DcjmF1zytCVj5gi/pAJ71H:DH6c71S2gy5w2caF1g4j5gi/OJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06055951e4ce0dd7cb2da0c68259848f_JaffaCakes118

Files

06055951e4ce0dd7cb2da0c68259848f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

165f92fc864a6c3092b3ab508d68feb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
lstrlenA
CreateEventA
CloseHandle
OpenMutexA
FindClose
ResumeThread
GlobalLock
OpenMutexA
GetModuleHandleA
FreeConsole
LocalFree
GlobalUnlock
GetLastError
IsBadReadPtr
GetSystemTime
GetACP
LoadLibraryExW
FreeEnvironmentStringsA
VirtualProtectEx

user32

SetFocus
GetComboBoxInfo
IsMenu
GetSubMenu
GetDlgItemTextA
IsIconic
GetMessageA
GetMessageA
ClipCursor
LoadCursorA
CreateWindowExA
DialogBoxParamA
EndDialog
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BEREncOpenType
ASN1DecAlloc
ASN1BERDecCheck
ASN1BEREncNull

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ