ab2dbcdb1fe6073291e562f565c4420e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab2dbcdb1fe6073291e562f565c4420e_JaffaCakes118
Size

89KB
MD5

ab2dbcdb1fe6073291e562f565c4420e
SHA1

34a5928dd92eaf02bc82dcfc970060c0dc991fe7
SHA256

340d531c4f5f3ee4d95aefe8895968e6be132ddfc84879a316d5dc268779c8fa
SHA512

5a5722ad8c80268ab65aea6a9c25291a9c165e8564f99f3550dda91b43b9fdc301ba94073eba8ff7d2b27dff2176e4c9762eef3f2bdab5e8e245f7bb249394d4
SSDEEP

1536:lX75naX5+ciBuiNtARDnPAazfKJPwna3VHbAnHhK6Wv+BkY78zGuIWI:LE5FU/8RD4a+JPmObAnrWmwquI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab2dbcdb1fe6073291e562f565c4420e_JaffaCakes118

Files

ab2dbcdb1fe6073291e562f565c4420e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e85e8a5314d4da1b440f540eae9676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetLastError
CreateEventA
FreeConsole
ResumeThread
GetModuleHandleA
LoadLibraryExW
GetStdHandle
OpenMutexA
FindClose
GetSystemTime
FreeEnvironmentStringsA
GlobalLock
VirtualProtectEx
lstrlenA
LocalFree
IsBadReadPtr
GetACP
OpenMutexA

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
IsIconic
LoadCursorA
DialogBoxParamA
GetComboBoxInfo
IsMenu
EndDialog
CreateWindowExA
ClipCursor
SetFocus
GetMessageA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE