329d21ef50dab8aa76af3d0343505ad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

329d21ef50dab8aa76af3d0343505ad9_JaffaCakes118
Size

352KB
MD5

329d21ef50dab8aa76af3d0343505ad9
SHA1

30d7cf6cb2c765e5009493d839c6e067e35c217b
SHA256

a171537b98cdaf2b598346a887a2f48b2b9604bbb0dadc8c3bd6e4b47a92c4eb
SHA512

219265de2299b92e7b29b170de6bf3ee8d58edac21ef806fd2bf4df964279f26c8fd149754fb82013ccbdcd5b9f25c30cb92a486b67f224e86e788b19513db7b
SSDEEP

6144:htLqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeWoKN5f:aWDQcShyGloFjbTA1KmNo/VFjzff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
329d21ef50dab8aa76af3d0343505ad9_JaffaCakes118

Files

329d21ef50dab8aa76af3d0343505ad9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b69ffa7b73d74dc80059a1789a627c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
LoadLibraryExW
GlobalUnlock
LocalFree
VirtualProtectEx
GetModuleHandleA
GetStdHandle
FreeConsole
ResumeThread
CloseHandle
OpenMutexA
GlobalLock
CreateEventA
IsBadReadPtr
OpenEventA
FreeEnvironmentStringsA
lstrlenA
GetLastError
FindClose
GetACP

user32

SetFocus
ClipCursor
GetSubMenu
EndDialog
GetDlgItemTextA
IsMenu
GetComboBoxInfo
DialogBoxParamA
CreateWindowExA
GetMessageA
IsIconic
GetMessageA
LoadCursorA
MessageBoxA

msasn1

ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncNull

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ