42919feb9b49ab9d150cb34faf5ce866_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42919feb9b49ab9d150cb34faf5ce866_JaffaCakes118
Size

352KB
MD5

42919feb9b49ab9d150cb34faf5ce866
SHA1

160f06fe7c7921774a7268976de11bdd264b1d48
SHA256

f7adfa81ace0b7824781bcb198a45cf7dc87a4b741cbfad44a6586a285b2c706
SHA512

923ce78c4e1765ce3a739c5ff8ee7b3263506d9b0e1c66dfda00c28cc55677afdffee8b08bddd5fa890f221d57f15e1aff76ca26c2bd8a80fdc9983d6c0885ea
SSDEEP

6144:JtMuqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFe/qxzSiUY:4/WDQcShyGloFjbTA1KmNo/VFcqx26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42919feb9b49ab9d150cb34faf5ce866_JaffaCakes118

Files

42919feb9b49ab9d150cb34faf5ce866_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e10be970eb2664665fd1a4e21cb2b67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
OpenMutexA
FreeConsole
GetACP
FreeEnvironmentStringsA
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
OpenEventA
GetModuleHandleA
ResumeThread
LoadLibraryExW

user32

SetFocus
GetSubMenu
ClipCursor
GetComboBoxInfo
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ