f40427d005e34a7c49aa35c4c0653922_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f40427d005e34a7c49aa35c4c0653922_JaffaCakes118
Size

48KB
MD5

f40427d005e34a7c49aa35c4c0653922
SHA1

5c84c6db047c1d4c46b1b95e5dc81243a7a160a9
SHA256

601435f1bb97d89514c56fa651dfa30e210ee1d507631c8be0e3d3efcde3e5ea
SHA512

c5e2fc4a9d7143c2f1161d9ab158359a3de559fc3654adadea1938e6448ba8dfe8653c644e54ab627c764cccce4f1eae288012c56933b9cbd1ae670d95e1f0bc
SSDEEP

384:ywZMLlt5Cq4Ke19C/aWxOt+K1tpeKMWiqSlEV9Or4DJD:ysQhxO9hMWFSlE3Dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f40427d005e34a7c49aa35c4c0653922_JaffaCakes118

Files

f40427d005e34a7c49aa35c4c0653922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

552cb014ac3a1d61bbb8df7d7ed466e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
EnumCalendarInfoA
GetStartupInfoA

user32

OpenIcon

gdi32

CreatePen
CombineRgn

comdlg32

ChooseFontA

advapi32

CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
CryptAcquireContextA

msvcrt

__p__commode
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ