3e2d654dacef0391dce13fd25a8327db_JaffaCakes118 | Triage

Sharing

General

Target

3e2d654dacef0391dce13fd25a8327db_JaffaCakes118
Size

88KB
MD5

3e2d654dacef0391dce13fd25a8327db
SHA1

4eb9ac75f02ab454dd785b96079e442ce13f4260
SHA256

fae22dec294466e285867096303280c40137b1f846737efbb7cfc847720d02bc
SHA512

c97c6f10022cb10de68f600e9499a3a200bd045e63dabe125aef51f65076d2a2e8ab2faa3620f6c3cbd52db04f08f46b7b6600142cc447108427ac9614bade0f
SSDEEP

1536:ROU2CCdVuUB24Ngwy6SogaaQg2Sz+FHf4U5c6wXye:4bCCuS24NfyogaaQdSz+f4zvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2d654dacef0391dce13fd25a8327db_JaffaCakes118

Files

3e2d654dacef0391dce13fd25a8327db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a98fe8423b28d622244fc17d019b4fed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LoadLibraryExW
GetDiskFreeSpaceExW
FreeConsole
GetModuleHandleA
VirtualProtect
GetCommandLineA
TlsGetValue
CloseHandle
GetDateFormatA
IsBadCodePtr
GetDriveTypeW
SetLastError
PulseEvent
Sleep
IsBadReadPtr
LocalFree
FindClose
GetLastError
EnumResourceTypesA

user32

CreateWindowExA
DragDetect
GetMessageA
CopyImage
CloseWindow
IsIconic
EnableWindow
DispatchMessageA
GetKeyState
GetScrollBarInfo
GetUpdateRect
DialogBoxParamA
CreateMenu

msasn1

ASN1BERDecFlush
ASN1BERDecBool
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecDouble

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ