ed4337115e49cea98963dcd4f81471e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed4337115e49cea98963dcd4f81471e3_JaffaCakes118
Size

58KB
MD5

ed4337115e49cea98963dcd4f81471e3
SHA1

a16f992f7e59ded551e3607d7c820ab4cf4953ea
SHA256

6b57a976d5786e6fbbe4b8ad6536f78a43b8c2846fd839af6763d031cc141e86
SHA512

2fb82cc9764ada5d5433b90205de3fe1890a050af54ff7277bdcfd9dc5761d10b2f3416ba0ade29f7687f624f5fbc62e9074a429c13f76b24106285f130beea4
SSDEEP

1536:oTjfSEg0Nr7AL6qyIiBss4Ums7rkaNTl:0fpxUWIiOgj7rJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed4337115e49cea98963dcd4f81471e3_JaffaCakes118

Files

ed4337115e49cea98963dcd4f81471e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9ca3e99310bc9bf0453e395adf8ffb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CreateFileA
lstrlenW
GetEnvironmentVariableA
ReleaseMutex
TlsGetValue
CreateMutexA
GetProcessHeap
CloseHandle
GetCurrentThreadId
TlsAlloc
GlobalFree
DeleteAtom
GetStdHandle
HeapCreate
FindResourceA
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
SetLastError

user32

CreateWindowExA
CheckRadioButton
FillRect
DrawMenuBar
SetFocus
GetDC
CreateMenu
DispatchMessageA
CallWindowProcA
GetCaretPos
DrawEdge
IsWindow
GetDlgItem

rsaenh

CPSignHash
CPGenKey
CPHashData
CPDecrypt
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE