b8d63cf778aa8e0d206035a1c77441e2_JaffaCakes118 | Triage

Sharing

General

Target

b8d63cf778aa8e0d206035a1c77441e2_JaffaCakes118
Size

40KB
MD5

b8d63cf778aa8e0d206035a1c77441e2
SHA1

a18e1f1c90a0af90e4813aba84d9233caad1bef3
SHA256

1b51866afa7a4a8c9117822f617283e7b8d61bd0113bd1ed94d93dca7069e067
SHA512

5ae774a60e85ca047aa19e362ab361f28ff1e98e133f81098e97bee4b95105aa801993fb6535eb4924d4ada9084290bf6fbd34f49a4c6d798b84782def568b96
SSDEEP

768:gAUrD+oimJb9dXtz/xzSjzocvbzq+BTh3yV:1UX+xMtz/BSvBTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d63cf778aa8e0d206035a1c77441e2_JaffaCakes118

Files

b8d63cf778aa8e0d206035a1c77441e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

082a2ea3118e1b543bd5c4428c9d9a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
GlobalLock
FreeEnvironmentStringsA
ResumeThread
CreateEventA
lstrlenA
FreeConsole
FindClose
GetSystemTime
CloseHandle
IsBadReadPtr
GlobalUnlock
LoadLibraryExW
GetACP
GetModuleHandleA
GetLastError
OpenMutexA
OpenMutexA
GetStdHandle
LocalFree

user32

EndDialog
GetSubMenu
GetComboBoxInfo
SetFocus
ClipCursor
LoadCursorA
IsIconic
GetMessageA
DialogBoxParamA
GetMessageA
IsMenu
GetDlgItemTextA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ