b3858fb44b3dbced4eb4dfea36e51a79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3858fb44b3dbced4eb4dfea36e51a79_JaffaCakes118
Size

352KB
MD5

b3858fb44b3dbced4eb4dfea36e51a79
SHA1

ec36024149efda1b752c47ac9e3d51ec86d79fd3
SHA256

52a4aafeaf60b0c4d9570cd2c1dcc30fbf4f3320d4f1fbe86c596f52d54685c9
SHA512

d50c8286452a0bcf367186a25819dbde5713ec9f42170e3edf0a8979fbe4ae5e37c226b268422664010308df536448840722a758bc880920469290490668a3f8
SSDEEP

6144:JtQyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/XZIwa/C:MyUuJbB5tNFX7B3JusP/pIJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3858fb44b3dbced4eb4dfea36e51a79_JaffaCakes118

Files

b3858fb44b3dbced4eb4dfea36e51a79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87cc7b5d9cdccff9e4862ee9f958fe6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
LoadLibraryExA
FindClose
GetACP
GlobalUnlock
VirtualProtectEx
GetModuleHandleA
IsBadStringPtrA
GetStdHandle
GetSystemTime
FreeEnvironmentStringsA
OpenMutexA
IsBadReadPtr
ResumeThread
lstrlenA
LocalFree
CreateEventA
GlobalLock
FreeConsole

user32

GetDlgItemTextA
GetComboBoxInfo
GetSubMenu
IsIconic
GetMessageA
IsMenu
CheckMenuItem
EndDialog
SetFocus
CreateWindowExA
DialogBoxParamA
GetMessageA
ClipCursor
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecCheck
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecBool

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ