41afa21d026955b2b95853c4e8f29d2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41afa21d026955b2b95853c4e8f29d2f_JaffaCakes118
Size

352KB
MD5

41afa21d026955b2b95853c4e8f29d2f
SHA1

34acf75363d742b2ff634b88d516911ffb093c16
SHA256

55d0b7b5a01695f3baadff9a36452e1e208459f2cf1a26683f7fd1f21b852203
SHA512

8ba3b1459db981b476f422c0cb296670c046226309f8803339484855d9c582fb9eb4d0e32319eefe4d334e0389474c8f7ac7a2709625024c680195ef13e97cf4
SSDEEP

6144:QtUqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeadj/:cWDQcShyGloFjbTA1KmNo/VFNdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41afa21d026955b2b95853c4e8f29d2f_JaffaCakes118

Files

41afa21d026955b2b95853c4e8f29d2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68fbcc6d40d98f3bd42241a5e17e293f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GlobalUnlock
GlobalLock
GetLastError
FreeEnvironmentStringsA
LoadLibraryExA
OpenMutexA
GetSystemTime
FreeConsole
VirtualProtectEx
GetModuleHandleA
lstrlenA
OpenSemaphoreA
GetStdHandle
FindClose
CloseHandle
ResumeThread
LocalFree
GetACP
CreateEventA

user32

IsIconic
DialogBoxParamA
GetComboBoxInfo
GetSubMenu
LoadCursorA
GetDlgItemTextA
CreateWindowExA
IsMenu
GetMessageA
ClipCursor
EndDialog
GetMessageA
SetFocus
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1DecAlloc
ASN1BEREncOpenType

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ