fdf330776be59d2328f4bffe39b5880b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf330776be59d2328f4bffe39b5880b_JaffaCakes118
Size

352KB
MD5

fdf330776be59d2328f4bffe39b5880b
SHA1

e0d6b864d38f66658f5cb617880598ac85e4cac3
SHA256

f03bc48381a64cfcba4240fc3f5977a0e27f1e037e943ff9ad8b1035c0a9c5b6
SHA512

6aed2e498cce01a8888558438419a702ae9c7db36f7de03314a742f3ae48a0e785d3d03177a94dbb958835a1a6550c06f599be377b24f0356edb6380db79d243
SSDEEP

6144:MtPqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeInaDzsJj:HWDQcShyGloFjbTA1KmNo/VFzaPsJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf330776be59d2328f4bffe39b5880b_JaffaCakes118

Files

fdf330776be59d2328f4bffe39b5880b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1581f5eec18006d6973fd7e7e600a292

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
OpenMutexA
LoadLibraryExA
VirtualProtectEx
IsBadReadPtr
GetLastError
CreateEventA
CloseHandle
FreeEnvironmentStringsA
lstrlenA
FindClose
GlobalLock
GlobalUnlock
LocalFree
FreeConsole
ResumeThread
GetSystemTime
GetStdHandle
OpenSemaphoreA
GetModuleHandleA

user32

CreateWindowExA
ClipCursor
IsMenu
GetComboBoxInfo
GetMessageA
GetDlgItemTextA
SetFocus
GetMessageA
EndDialog
DialogBoxParamA
IsIconic
GetSubMenu
LoadCursorA
MessageBoxA

msasn1

ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecBool
ASN1BEREncNull
ASN1BERDecCheck

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ