d3899480a0313a68669fe2e6ab663a0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3899480a0313a68669fe2e6ab663a0e_JaffaCakes118
Size

352KB
MD5

d3899480a0313a68669fe2e6ab663a0e
SHA1

321c0f1a8155ed63d4f91d3d0fd76de8c0d0b949
SHA256

11851beee8c03300dd0a434c1b2de025213d7656fcea0882741aea4d877cb471
SHA512

d5eac7abfc802babf7e05ccbb9841bfc67a56b550883a195b3e15c46dcc76aa31ffeebcd0035debbb084ae37c60a3355315e6e713d194247ad2dc028afdf9ae3
SSDEEP

6144:4tVFqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeYvNP82qU:zWDQcShyGloFjbTA1KmNo/VF9V02t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3899480a0313a68669fe2e6ab663a0e_JaffaCakes118

Files

d3899480a0313a68669fe2e6ab663a0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35a04762116f8e152f889087a5de9689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LocalFree
GlobalLock
CreateEventA
FreeEnvironmentStringsA
OpenMutexA
IsBadReadPtr
OpenSemaphoreA
GlobalUnlock
lstrlenA
GetACP
CloseHandle
ResumeThread
LoadLibraryExA
FreeConsole
VirtualProtectEx
FindClose
GetSystemTime
GetStdHandle
GetLastError

user32

GetComboBoxInfo
CreateWindowExA
LoadCursorA
SetFocus
GetMessageA
DialogBoxParamA
ClipCursor
IsIconic
GetSubMenu
GetDlgItemTextA
EndDialog
IsMenu
GetMessageA
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncNull

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ