d0fdb274930b02a23e86897265dcb804_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0fdb274930b02a23e86897265dcb804_JaffaCakes118
Size

80KB
MD5

d0fdb274930b02a23e86897265dcb804
SHA1

c5ec03faa40a49474b289b3bcf461526279b1fe7
SHA256

94a8c53f2d532e4108f0d2860369d73d316bb8d3c1e5ea00dcae0bc98aa64e37
SHA512

6ea03188126814ac5fbeaa830e81bac972f69d9165bfe2c7b5b790e1e8e3594b0565d3ec03af6f6e88b3fd1e85e73b7165023b22244eb2ded3949bec13c68e42
SSDEEP

1536:edUsj0FigCSy4t/WFTIv8Pjz328Ab+URLdYbZMeTWAlKfVU0CD:e+FimyAWnPjz3INRLqbZMeTWMOWHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0fdb274930b02a23e86897265dcb804_JaffaCakes118

Files

d0fdb274930b02a23e86897265dcb804_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1eee07066e8933dc6c0f7d29b766fd5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
IsBadStringPtrA
CreateEventA
LocalFree
GetACP
GetSystemTime
GetModuleHandleA
VirtualProtectEx
IsBadReadPtr
GlobalUnlock
FreeConsole
GlobalLock
GetStdHandle
CloseHandle
lstrlenA
FreeEnvironmentStringsA
ResumeThread
OpenMutexA
FindClose
LoadLibraryExA

user32

IsIconic
EndDialog
GetDlgItemTextA
GetMessageA
GetComboBoxInfo
ClipCursor
IsMenu
GetSubMenu
GetMessageA
CheckMenuItem
DialogBoxParamA
SetFocus
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc
ASN1BERDecCheck
ASN1BERDecBool

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ