644a7919b9e45240e963ba5098c1eea6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

644a7919b9e45240e963ba5098c1eea6_JaffaCakes118
Size

352KB
MD5

644a7919b9e45240e963ba5098c1eea6
SHA1

46ef3bdaf6d7bc928ad4d069d7aba5fe833f755a
SHA256

c90408bfcc22bb1ad9438c8eb53abdfd4d5541edf0361ee3449f929cc8813e20
SHA512

debb897b9c8ff2d04fe30871c28c34bdbe3cb91c830b1bee746cb8be2677975add480212cf3da8d23bd0bb64d199197916be882d2603a1ebe83ce6fb4023b853
SSDEEP

6144:OkttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:O5WDQcShyGloFjbTA1KmNo/VFC6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644a7919b9e45240e963ba5098c1eea6_JaffaCakes118

Files

644a7919b9e45240e963ba5098c1eea6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8de5c5ea839fc45fc8cdf43b60e2c13c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetACP
CreateEventA
VirtualProtectEx
GetSystemTime
FreeConsole
LoadLibraryExW
ResumeThread
GetStdHandle
GlobalLock
OpenMutexA
CloseHandle
lstrlenA
GetLastError
OpenEventA
IsBadReadPtr
FreeEnvironmentStringsA
GlobalUnlock
LocalFree
FindClose

user32

GetDlgItemTextA
IsIconic
EndDialog
DialogBoxParamA
GetSubMenu
GetMessageA
GetComboBoxInfo
ClipCursor
LoadCursorA
IsMenu
SetFocus
GetMessageA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1DecAlloc
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ