451d18737efa5387d8dfa8ceeb83d4ce_JaffaCakes118 | Triage

Sharing

General

Target

451d18737efa5387d8dfa8ceeb83d4ce_JaffaCakes118
Size

352KB
MD5

451d18737efa5387d8dfa8ceeb83d4ce
SHA1

7a7bc0f7bd5869e17051154072e2db589c89e5fe
SHA256

2269ebada30eb02ad92ac256ad2871688ab7f19b0a39b8dc5f3e7c0c3b88e9dd
SHA512

858e9f8d5c8d03218cb7db05f037aad60f6901c35118d5e8c1d656f452ba7e74e0d354d48e988f30010f6aa764478b077a152880d5a680028658ae0c19c8847c
SSDEEP

6144:utfqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeD3WKlnX:9WDQcShyGloFjbTA1KmNo/VFA3WKl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451d18737efa5387d8dfa8ceeb83d4ce_JaffaCakes118

Files

451d18737efa5387d8dfa8ceeb83d4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9438373a7229764df02f077bd11d3033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeConsole
OpenMutexA
CloseHandle
lstrlenA
GetSystemTime
GetStdHandle
GlobalUnlock
GetACP
FindClose
LoadLibraryExW
GlobalLock
LocalFree
VirtualProtectEx
GetModuleHandleA
GetLastError
IsBadReadPtr
ResumeThread
CreateEventA
OpenEventA

user32

IsMenu
GetMessageA
GetMessageA
CreateWindowExA
LoadCursorA
EndDialog
IsIconic
GetComboBoxInfo
SetFocus
GetDlgItemTextA
DialogBoxParamA
ClipCursor
GetSubMenu
MessageBoxA

msasn1

ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecCheck
ASN1BEREncNull

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ