b1c87dc749b9558bb2ff55392fba6c8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1c87dc749b9558bb2ff55392fba6c8c_JaffaCakes118
Size

21KB
MD5

b1c87dc749b9558bb2ff55392fba6c8c
SHA1

99c2e60b328e022f376a74ea19e980c9b4a6de90
SHA256

676c17d88e2feedcb857a009868514e79e6d8e68c287fb620d48661c14d24646
SHA512

2596421cbdb9a3e6c97f2724c5b5c78dc25fd9d95e8f8ebaa06b4d62a038b36db2899c2af7939a82ffa400be3ca46f53ddd318fb8db7bb28291b4dc9f50c8578
SSDEEP

384:9Adrxbv/CcZlwJvOVGQsk8NqNM3hDXvhAk+8+s5wUIogOi:idtbv/Cc/MNd3NXvyk+8h5kT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1c87dc749b9558bb2ff55392fba6c8c_JaffaCakes118

Files

b1c87dc749b9558bb2ff55392fba6c8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45fbe7d9b93fc3c811c1d75e92730e7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
GetLastError
GetACP
OpenMutexA
FreeEnvironmentStringsA
IsBadReadPtr
FindClose
ResumeThread
lstrlenA
LocalFree
GlobalUnlock
CreateEventA
FreeConsole
OpenEventA
LoadLibraryExW
CloseHandle
VirtualProtectEx
GetStdHandle
GetModuleHandleA

user32

GetMessageA
GetMessageA
IsIconic
GetComboBoxInfo
SetFocus
IsMenu
LoadCursorA
GetSubMenu
ClipCursor
EndDialog
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ