b75fb06bc48acb29396ed592db81645b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b75fb06bc48acb29396ed592db81645b_JaffaCakes118
Size

352KB
MD5

b75fb06bc48acb29396ed592db81645b
SHA1

814fb5b0e59f49a82b8a3fe21d029f12a8d770ed
SHA256

fb5b97dfdca5cc091bf8bfbefede296d4b8c2745f2cca75c36535a2476f25582
SHA512

f252810b98897d96ff94200cf3bad713eadf7aed2f28b4f74243a1a060a13b629bb8805237a20eef13e7f68088d0b38e035c5a428fb696c2461fd1a060451f14
SSDEEP

6144:vtYqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFe7dk:jWDQcShyGloFjbTA1KmNo/VFidk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b75fb06bc48acb29396ed592db81645b_JaffaCakes118

Files

b75fb06bc48acb29396ed592db81645b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3add100543be3d6f0975efdab925a926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
ResumeThread
CreateEventA
FreeConsole
FreeEnvironmentStringsA
GlobalLock
OpenSemaphoreA
CloseHandle
VirtualProtectEx
FindClose
OpenMutexA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
SetFocus
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetComboBoxInfo
LoadCursorA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ