e20700e2b08690a900014cd232073cf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e20700e2b08690a900014cd232073cf1_JaffaCakes118
Size

352KB
MD5

e20700e2b08690a900014cd232073cf1
SHA1

88b6a5f35f660eaaf30de470195cf74802706462
SHA256

308b79bb80b1a40e3ec1fda7062c3938e109790480c70cee32084c56807b2d8f
SHA512

5705217f2395d25071100bbec57ed24edea7a728fb1717343ce9f992f5c517f29b9995677efbed563d81ed966ba04bf20a271bf570c707de56a325988ea020b6
SSDEEP

6144:StmpyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/XzS+NACo:DpyUuJbB5tNFX7B3JusP/j7aCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20700e2b08690a900014cd232073cf1_JaffaCakes118

Files

e20700e2b08690a900014cd232073cf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e5c5ddd3ec5cc2fe94be5f24f86b0b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalUnlock
GetLastError
GetACP
CreateEventA
OpenMutexA
LoadLibraryExA
IsBadReadPtr
CloseHandle
GlobalLock
GetStdHandle
GetSystemTime
FreeConsole
GetModuleHandleA
ResumeThread
LocalFree
IsBadStringPtrA
VirtualProtectEx

user32

GetDlgItemTextA
CreateWindowExA
ClipCursor
GetSubMenu
GetMessageA
DialogBoxParamA
GetComboBoxInfo
CheckMenuItem
IsMenu
GetMessageA
EndDialog
SetFocus
IsIconic
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BEREncNull
ASN1DecAlloc
ASN1BERDecCheck
ASN1BEREncOpenType

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ