fb60d7b3affe9440da943f8fae6d9439_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb60d7b3affe9440da943f8fae6d9439_JaffaCakes118
Size

14KB
MD5

fb60d7b3affe9440da943f8fae6d9439
SHA1

f255bf3354ea71b92b615ff2b4640b9c8f913967
SHA256

0bc7d38d4cfc3af6bd64efa4db267f3bce0eb2a39b73a65920fe6a658e7a060c
SHA512

350e8e7d633061e37016f2a4aac0d5e8481f58366946dc10c5d811c5ff6d444c5436ce221de7b0767bda2c14adb41f40abb0550e78dd3df732ae8719d70a6937
SSDEEP

192:wESNomb0qoFGdLjZaMNeTL3TNeT4+vDqP9Oms1g7oSwS/PD:5FGdLEMNeLNek+vD1RSwS/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb60d7b3affe9440da943f8fae6d9439_JaffaCakes118

Files

fb60d7b3affe9440da943f8fae6d9439_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e85e8a5314d4da1b440f540eae9676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetLastError
CreateEventA
FreeConsole
ResumeThread
GetModuleHandleA
LoadLibraryExW
GetStdHandle
OpenMutexA
FindClose
GetSystemTime
FreeEnvironmentStringsA
GlobalLock
VirtualProtectEx
lstrlenA
LocalFree
IsBadReadPtr
GetACP
OpenMutexA

user32

GetSubMenu
GetMessageA
GetDlgItemTextA
IsIconic
LoadCursorA
DialogBoxParamA
GetComboBoxInfo
IsMenu
EndDialog
CreateWindowExA
ClipCursor
SetFocus
GetMessageA
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ