285e740bf57e1ea68a975cf6646ab906_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

285e740bf57e1ea68a975cf6646ab906_JaffaCakes118
Size

21KB
MD5

285e740bf57e1ea68a975cf6646ab906
SHA1

425a5958253e34226df9f89f6f6cd2343f268d06
SHA256

4447a99c187b528082fff0747b4759561daa43fe4e18377c7afe399dab01a0cd
SHA512

85dd7f3467c434180a01ee2bbad6f913ca8106235a5b2140ff8e68ffddfe545cf9f34fec3e43c134224be119e3f83ea34333d2df7a37e0d7fb4fe030723fdfda
SSDEEP

384:oAdrxbv/CcZlwJvOVJQsk8NqNM3hDXvhAk+8+s5wUIogOi:Fdtbv/Cc//Nd3NXvyk+8h5kT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
285e740bf57e1ea68a975cf6646ab906_JaffaCakes118

Files

285e740bf57e1ea68a975cf6646ab906_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45fbe7d9b93fc3c811c1d75e92730e7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
GetLastError
GetACP
OpenMutexA
FreeEnvironmentStringsA
IsBadReadPtr
FindClose
ResumeThread
lstrlenA
LocalFree
GlobalUnlock
CreateEventA
FreeConsole
OpenEventA
LoadLibraryExW
CloseHandle
VirtualProtectEx
GetStdHandle
GetModuleHandleA

user32

GetMessageA
GetMessageA
IsIconic
GetComboBoxInfo
SetFocus
IsMenu
LoadCursorA
GetSubMenu
ClipCursor
EndDialog
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ