38189276abd175e9dce9e2b94e9bb129_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38189276abd175e9dce9e2b94e9bb129_JaffaCakes118
Size

6KB
MD5

38189276abd175e9dce9e2b94e9bb129
SHA1

63ca1bdaa71ee97db941540eef6c753a6c2d7653
SHA256

a951a91a445ab0bd369cbbbbdff224c3836212dbe75032114fe1aae14412a7cc
SHA512

0510f58cc3abd267ee6e96320a19dd5c7cee011300a06e97899bf7f1dcc4dbfc738dae5abf45bf55cedf99d48d97169b7bae167b081e8d6f1727a3a277862652
SSDEEP

96:hgxhysMp+cRs3TjWKFctNfDBXN+bbEPvtz7woxOagPOav/s6:KWJsjjWKK5B4b0qoo7WK/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38189276abd175e9dce9e2b94e9bb129_JaffaCakes118

Files

38189276abd175e9dce9e2b94e9bb129_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fc3dc24b9f530dc3b6967fc704b4928

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetSystemTime
ResumeThread
OpenMutexA
GetLastError
IsBadReadPtr
OpenMutexA
CloseHandle
GetACP
LocalFree
GlobalLock
FreeEnvironmentStringsA
CreateEventA
GlobalUnlock
lstrlenA
GetStdHandle
GetModuleHandleA
VirtualProtectEx
LoadLibraryExW
FreeConsole

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
ClipCursor
IsIconic
GetMessageA
GetComboBoxInfo
EndDialog
SetFocus
DialogBoxParamA
LoadCursorA
CreateWindowExA
IsMenu
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ