90779f1357cb7efc85af0c25a62d282c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90779f1357cb7efc85af0c25a62d282c_JaffaCakes118
Size

676KB
MD5

90779f1357cb7efc85af0c25a62d282c
SHA1

f94b0de6b12c41b9b4fb93b9645939057ef936bd
SHA256

3f8d9d8ae308a46541ba524efe7d6ea483b768fdac151028b75712f5cd198433
SHA512

2b3d53ba26e71b04a0cafb71069a8e09f5c53bf1c128a5d254733b9f6412a27e7ef27c53e51f3452714d4b0b4774da5aba621011dc61dfb57099fad81433e52c
SSDEEP

12288:i3D8/eMp3q+AJlK3Hn8DcmSpOVcEn7e0OEst1/ibkcnX4Yx/:ike3235mSpUc67D0cX4k/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90779f1357cb7efc85af0c25a62d282c_JaffaCakes118

Files

90779f1357cb7efc85af0c25a62d282c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ea57984633d404729d7b4c04a05551a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rsaenh

CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey

kernel32

GetCurrentThreadId
LoadLibraryExW
WriteConsoleA
GetShortPathNameW
CloseHandle
HeapReAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreA
LoadLibraryA
CreateThread
OpenMutexW
lstrcmpi
FindClose

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ