30d95975fb41515f46b5f0345df36869_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d95975fb41515f46b5f0345df36869_JaffaCakes118
Size

89KB
MD5

30d95975fb41515f46b5f0345df36869
SHA1

a42b1ac2631c804fc4ef4da86381897917639899
SHA256

2dead2599e27f57206b576af491dd5b8a0e4267558c3f2a9d982266fa283d97f
SHA512

2e8a139f132ccd90a9c1051a8c55129fa91bd68d6cc5ce288c0e9fc6d9e42d3fa6a16bd2ea8df5b96231504e58891d6a55c42363e2b59e1827bb662de9eda67b
SSDEEP

1536:ZX75naX5+ciBuiNtARDnPAazfKJPwna3VHbAnHhK6Wv+BkY78zGuIWI:/E5FU/8RD4a+JPmObAnrWmwquI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30d95975fb41515f46b5f0345df36869_JaffaCakes118

Files

30d95975fb41515f46b5f0345df36869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e85e8a5314d4da1b440f540eae9676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetLastError
CreateEventA
FreeConsole
ResumeThread
GetModuleHandleA
LoadLibraryExW
GetStdHandle
OpenMutexA
FindClose
GetSystemTime
FreeEnvironmentStringsA
GlobalLock
VirtualProtectEx
lstrlenA
LocalFree
IsBadReadPtr
GetACP
OpenMutexA

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
IsIconic
LoadCursorA
DialogBoxParamA
GetComboBoxInfo
IsMenu
EndDialog
CreateWindowExA
ClipCursor
SetFocus
GetMessageA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE