4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118 | Triage

Sharing

General

Target

4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118
Size

352KB
MD5

4826e3d9a775d82209a1d3db23ae6b44
SHA1

7bcc1c46b20690b1f316ee64882340992efd80fb
SHA256

40dce9ca641144297bfe32cca4c147be4c725a55c3f7c2458ee5cc91bab15b70
SHA512

ad10fcd1611be1492abd39c2f731c1c48c27634e39941230a2f288cc0eaab570052eaa9da9a7e8239e4d7728c89a965d07aa6decad57ea0122ccfda822d50eee
SSDEEP

6144:JjttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:JWWDQcShyGloFjbTA1KmNo/VFC6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118

Files

4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8de5c5ea839fc45fc8cdf43b60e2c13c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetACP
CreateEventA
VirtualProtectEx
GetSystemTime
FreeConsole
LoadLibraryExW
ResumeThread
GetStdHandle
GlobalLock
OpenMutexA
CloseHandle
lstrlenA
GetLastError
OpenEventA
IsBadReadPtr
FreeEnvironmentStringsA
GlobalUnlock
LocalFree
FindClose

user32

GetDlgItemTextA
IsIconic
EndDialog
DialogBoxParamA
GetSubMenu
GetMessageA
GetComboBoxInfo
ClipCursor
LoadCursorA
IsMenu
SetFocus
GetMessageA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1DecAlloc
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ