24e6fb7d0528d8489eb1380147d7fe4c_JaffaCakes118 | Triage

Sharing

General

Target

24e6fb7d0528d8489eb1380147d7fe4c_JaffaCakes118
Size

105KB
MD5

24e6fb7d0528d8489eb1380147d7fe4c
SHA1

edb8052c4cc6c35750754efc04b11bfae778986a
SHA256

7c1027e741a853e456b8c80d5f37a5cd896a9b53f862b77f95cebe722ab309bb
SHA512

fc98eb8f96280e8c9dc859a9c822a7ed7dc8d22c89b0159101e54f0c4b81995de99f7e6b4835ad43f7a971dded3a91f9d77f225119a45a874aab2ce5baa1540d
SSDEEP

1536:2xvj54n7/9neT9tdjez72Hpha9oQMIUYHb19eg98j57PCQhJRfcHVWJm/S7R+GpS:kqnheT9tdjkaqDMIUS/eRFaaXctqpy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24e6fb7d0528d8489eb1380147d7fe4c_JaffaCakes118

Files

24e6fb7d0528d8489eb1380147d7fe4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fc3dc24b9f530dc3b6967fc704b4928

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetSystemTime
ResumeThread
OpenMutexA
GetLastError
IsBadReadPtr
OpenMutexA
CloseHandle
GetACP
LocalFree
GlobalLock
FreeEnvironmentStringsA
CreateEventA
GlobalUnlock
lstrlenA
GetStdHandle
GetModuleHandleA
VirtualProtectEx
LoadLibraryExW
FreeConsole

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
ClipCursor
IsIconic
GetMessageA
GetComboBoxInfo
EndDialog
SetFocus
DialogBoxParamA
LoadCursorA
CreateWindowExA
IsMenu
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ