b258e6ca715c8664f2d3504fafadba89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b258e6ca715c8664f2d3504fafadba89_JaffaCakes118
Size

81KB
MD5

b258e6ca715c8664f2d3504fafadba89
SHA1

9dee09dd5e149859a5a39b18ce3fbd2a3a64b63c
SHA256

b3a7320fbb0fc86b8a1fadc7d59a8677390a9ff219a1088bb4fd1161e5c7f99d
SHA512

34e03129e4cdfb989b750d4e191cdc71532faeeb61a153c64dcbbbae766abedb048435938baae76c089e3bd917212ed08fd574ebb86844913867c3ee3a68ac54
SSDEEP

768:oFOU6KY1Td7/QgoGFbC9PnY6XlR1Up1RnG4kZNWAbAYdyCh6MxF6nLlTTzOwoM+E:oFOUzY56pVnlR1ULsnZQmdFbknxOo+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b258e6ca715c8664f2d3504fafadba89_JaffaCakes118

Files

b258e6ca715c8664f2d3504fafadba89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e06692a51e300b0668d2b2475a0e6783

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
IsBadReadPtr
SetLastError
GetDiskFreeSpaceExW
PulseEvent
GetDriveTypeW
GetCommandLineA
FreeConsole
CloseHandle
VirtualProtect
LoadLibraryExW
IsBadCodePtr
GetDateFormatA
DeleteCriticalSection
GetLastError
Sleep
EnumResourceTypesA
FindClose
GetModuleHandleA
TlsGetValue

user32

EnableWindow
GetMessageA
DragDetect
IsIconic
CreateMenu
GetUpdateRect
CopyImage
DialogBoxParamA
CloseWindow
DispatchMessageA
GetKeyState
GetScrollBarInfo
CreateWindowExA

msasn1

ASN1BERDecBool
ASN1BERDecFlush
ASN1BERDecEoid
ASN1BERDecDouble
ASN1BERDecCheck

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ