6393286d3a31e0b1c5af09ad25f562fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6393286d3a31e0b1c5af09ad25f562fd_JaffaCakes118
Size

352KB
MD5

6393286d3a31e0b1c5af09ad25f562fd
SHA1

3ce55af73b78221b577c3188ee50da0a22bb5182
SHA256

884d40efe7021b7a1cd105a269fa0e6e62fdef81e424a05f5dbb6e79a837232f
SHA512

af41e6fc85fd55128243e72090ada83a0266b1d6ee76af61423f186c208f1e7bba4daf38ecb6b178c84f1ce7656a7f59e8ccae083eaf1fdecc50a3bf26e61e40
SSDEEP

6144:6etVqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFelsEe:SWDQcShyGloFjbTA1KmNo/VFcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6393286d3a31e0b1c5af09ad25f562fd_JaffaCakes118

Files

6393286d3a31e0b1c5af09ad25f562fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45fbe7d9b93fc3c811c1d75e92730e7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
GetLastError
GetACP
OpenMutexA
FreeEnvironmentStringsA
IsBadReadPtr
FindClose
ResumeThread
lstrlenA
LocalFree
GlobalUnlock
CreateEventA
FreeConsole
OpenEventA
LoadLibraryExW
CloseHandle
VirtualProtectEx
GetStdHandle
GetModuleHandleA

user32

GetMessageA
GetMessageA
IsIconic
GetComboBoxInfo
SetFocus
IsMenu
LoadCursorA
GetSubMenu
ClipCursor
EndDialog
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ