83022a577a101620d30ccd038e6b46db_JaffaCakes118 | Triage

Sharing

General

Target

83022a577a101620d30ccd038e6b46db_JaffaCakes118
Size

352KB
MD5

83022a577a101620d30ccd038e6b46db
SHA1

732579cd1e8ad8d38ea3a087ac613f7a6b8b89d6
SHA256

f032d1a8247323dbdb3936a26d658ac7206456725c82f58d5112bce02522aedc
SHA512

3d237d101b91ade93caa26aa081987f7050359fed019e2ff335f4a7bb3f73e5939f26d18000851f66c56356c7a853913cbf708311e6c148f89542afe15e30a8a
SSDEEP

6144:5tYqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFe7dk:9WDQcShyGloFjbTA1KmNo/VFidk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83022a577a101620d30ccd038e6b46db_JaffaCakes118

Files

83022a577a101620d30ccd038e6b46db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3add100543be3d6f0975efdab925a926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
ResumeThread
CreateEventA
FreeConsole
FreeEnvironmentStringsA
GlobalLock
OpenSemaphoreA
CloseHandle
VirtualProtectEx
FindClose
OpenMutexA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
SetFocus
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetComboBoxInfo
LoadCursorA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ