aa61dc7aa51f69d03759c3cf1f1c1f74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa61dc7aa51f69d03759c3cf1f1c1f74_JaffaCakes118
Size

352KB
MD5

aa61dc7aa51f69d03759c3cf1f1c1f74
SHA1

9df862428c6ef79602f6e60db49589bd253d4ccc
SHA256

bed1c8125e3df6090e70f41b15f82f974168026f44f9534deab44c0dfeba0df2
SHA512

bd3ae3e48c603eb765be7d6818ec1657377a6e8fdc5a9d7e90daa5bed9006940ed4faff0e07caf7f05bdd2f20bacddaaea91d2085cb54f13acde838fb50dd48f
SSDEEP

6144:UtfqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeD3WKlnX:LWDQcShyGloFjbTA1KmNo/VFA3WKl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa61dc7aa51f69d03759c3cf1f1c1f74_JaffaCakes118

Files

aa61dc7aa51f69d03759c3cf1f1c1f74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9438373a7229764df02f077bd11d3033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeConsole
OpenMutexA
CloseHandle
lstrlenA
GetSystemTime
GetStdHandle
GlobalUnlock
GetACP
FindClose
LoadLibraryExW
GlobalLock
LocalFree
VirtualProtectEx
GetModuleHandleA
GetLastError
IsBadReadPtr
ResumeThread
CreateEventA
OpenEventA

user32

IsMenu
GetMessageA
GetMessageA
CreateWindowExA
LoadCursorA
EndDialog
IsIconic
GetComboBoxInfo
SetFocus
GetDlgItemTextA
DialogBoxParamA
ClipCursor
GetSubMenu
MessageBoxA

msasn1

ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecCheck
ASN1BEREncNull

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ