c004ce4c5d17056f66762c55f27ec8f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c004ce4c5d17056f66762c55f27ec8f4_JaffaCakes118
Size

352KB
MD5

c004ce4c5d17056f66762c55f27ec8f4
SHA1

728d50bd32936ce599a261401642f5e103e665db
SHA256

43148356c22697ac127b941d45d1befff6d4f8ddc33ac387d4c6220d8f5a1759
SHA512

75399d3cd0d57c7e232f37d600ba7705299a86c224bca100c7b35f715ffae80a8cd7653a7fe49b7a02079aef1cf246d8f76e63cab6828bd76d282969d7d767e4
SSDEEP

6144:AEttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:AZWDQcShyGloFjbTA1KmNo/VFC6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c004ce4c5d17056f66762c55f27ec8f4_JaffaCakes118

Files

c004ce4c5d17056f66762c55f27ec8f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8de5c5ea839fc45fc8cdf43b60e2c13c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetACP
CreateEventA
VirtualProtectEx
GetSystemTime
FreeConsole
LoadLibraryExW
ResumeThread
GetStdHandle
GlobalLock
OpenMutexA
CloseHandle
lstrlenA
GetLastError
OpenEventA
IsBadReadPtr
FreeEnvironmentStringsA
GlobalUnlock
LocalFree
FindClose

user32

GetDlgItemTextA
IsIconic
EndDialog
DialogBoxParamA
GetSubMenu
GetMessageA
GetComboBoxInfo
ClipCursor
LoadCursorA
IsMenu
SetFocus
GetMessageA
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1DecAlloc
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ