aa530a2e04c7f4559e5ae206f8da3099_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa530a2e04c7f4559e5ae206f8da3099_JaffaCakes118
Size

352KB
MD5

aa530a2e04c7f4559e5ae206f8da3099
SHA1

6b60f0cdfb6a15d38a9d3b4089a024d8cbf34b41
SHA256

ff220366032dc6a16bc3fb30f8a615319210ec3aa8d8e98d7fc43ccc4a498d61
SHA512

1966c9f3cf705a7a6316ce6749446d67a632be15b54904e455746a9287e83082a4a9fc73a0135120045b5789ef1107a0fe81dc587e7e0a59b794a89bcfc066ad
SSDEEP

6144:SyttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:SfWDQcShyGloFjbTA1KmNo/VFC6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa530a2e04c7f4559e5ae206f8da3099_JaffaCakes118

Files

aa530a2e04c7f4559e5ae206f8da3099_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8de5c5ea839fc45fc8cdf43b60e2c13c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetACP
CreateEventA
VirtualProtectEx
GetSystemTime
FreeConsole
LoadLibraryExW
ResumeThread
GetStdHandle
GlobalLock
OpenMutexA
CloseHandle
lstrlenA
GetLastError
OpenEventA
IsBadReadPtr
FreeEnvironmentStringsA
GlobalUnlock
LocalFree
FindClose

user32

GetDlgItemTextA
IsIconic
EndDialog
DialogBoxParamA
GetSubMenu
GetMessageA
GetComboBoxInfo
ClipCursor
LoadCursorA
IsMenu
SetFocus
GetMessageA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1DecAlloc
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ