606c14369fc45d09552a417b70ce197f_JaffaCakes118 | Triage

Sharing

General

Target

606c14369fc45d09552a417b70ce197f_JaffaCakes118
Size

814KB
MD5

606c14369fc45d09552a417b70ce197f
SHA1

e88cee8e23fccce8649072d4816cd78ba5a014ec
SHA256

80c38a0f3adbb972f6e85848f6e81b116aaafd3d13b3916a4e3521b0760b68ea
SHA512

eca7597ba634c8b63895ae742c04412899cdce1590fb78e5c4a4f574d88c1025888aa815e433166b85423f6d078538d4cf46d3c5e2fb03b393daba2fe2ac17c4
SSDEEP

24576:3vSz4I7xcJPQp7PbLI3ROty3z6nrVjL+utjv:3vSf7aJSPbLI2Gz6nrVjqutb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
606c14369fc45d09552a417b70ce197f_JaffaCakes118

Files

606c14369fc45d09552a417b70ce197f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c45d5cb369c3200fe16ab88fba1400a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CloseHandle
GetEnvironmentVariableA
PulseEvent
LoadLibraryExW
GetModuleHandleA
TlsGetValue
CreateMutexA
ReleaseMutex
DeleteAtom
CreateFileA
FindResourceA
GlobalUnlock
CreateProcessA
GetACP
FindClose
SetLastError
ExitThread
GetCommandLineA
HeapCreate

user32

IsWindow
DispatchMessageA
GetDC
DrawEdge
CallWindowProcA
SetFocus
CheckRadioButton
GetIconInfo
DefWindowProcW
DrawMenuBar
GetDlgItem
FillRect
CopyRect

msasn1

ASN1BEREncBool
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncEoid

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ