dea471958b48ac1d1881ee8f806b4720_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea471958b48ac1d1881ee8f806b4720_JaffaCakes118
Size

89KB
MD5

dea471958b48ac1d1881ee8f806b4720
SHA1

d19b9c55857c224962ff15bdff6ba186a7a95ce4
SHA256

704b3f3df1b833c05db7e571ff1e519217add052ad263b7ea53d58a09f8ba765
SHA512

a0f18bc2018d90102d7de536c4d1eecb0a4b7d405034da48834aee18ba5bd499e9f5e125b74a687b1d453d33a06a2ce3efc15c0f61b821c191869efbd4299b24
SSDEEP

1536:oX75naX5+ciBuiNtARDnPAazfKJPwna3VHbAnHhK6Wv+BkY78zGuIWI:SE5FU/8RD4a+JPmObAnrWmwquI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea471958b48ac1d1881ee8f806b4720_JaffaCakes118

Files

dea471958b48ac1d1881ee8f806b4720_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e85e8a5314d4da1b440f540eae9676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetLastError
CreateEventA
FreeConsole
ResumeThread
GetModuleHandleA
LoadLibraryExW
GetStdHandle
OpenMutexA
FindClose
GetSystemTime
FreeEnvironmentStringsA
GlobalLock
VirtualProtectEx
lstrlenA
LocalFree
IsBadReadPtr
GetACP
OpenMutexA

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
IsIconic
LoadCursorA
DialogBoxParamA
GetComboBoxInfo
IsMenu
EndDialog
CreateWindowExA
ClipCursor
SetFocus
GetMessageA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE