737e0f1709952a02ae0aa86a8f07a2e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

737e0f1709952a02ae0aa86a8f07a2e2_JaffaCakes118
Size

352KB
MD5

737e0f1709952a02ae0aa86a8f07a2e2
SHA1

6702dabf93c4f59486db0ac019e7f3dcc6a8cb3c
SHA256

22461d5f2a528ef32e7aa8534190a5feafd05d6bd6cf6ee527bcd7cb4bd1548b
SHA512

ae6ac79ef9194b8c8b6e30e1697bf1e7e9cb550b5012fbae002be31d8aaf75a9bcf594734bcd65f871e00b9be29bc30cb5a737283a5caf3e66fb4783f835160a
SSDEEP

6144:2tmpyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/XzS+NACo:/pyUuJbB5tNFX7B3JusP/j7aCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737e0f1709952a02ae0aa86a8f07a2e2_JaffaCakes118

Files

737e0f1709952a02ae0aa86a8f07a2e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e5c5ddd3ec5cc2fe94be5f24f86b0b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalUnlock
GetLastError
GetACP
CreateEventA
OpenMutexA
LoadLibraryExA
IsBadReadPtr
CloseHandle
GlobalLock
GetStdHandle
GetSystemTime
FreeConsole
GetModuleHandleA
ResumeThread
LocalFree
IsBadStringPtrA
VirtualProtectEx

user32

GetDlgItemTextA
CreateWindowExA
ClipCursor
GetSubMenu
GetMessageA
DialogBoxParamA
GetComboBoxInfo
CheckMenuItem
IsMenu
GetMessageA
EndDialog
SetFocus
IsIconic
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BEREncNull
ASN1DecAlloc
ASN1BERDecCheck
ASN1BEREncOpenType

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ