adce71c0256a61db89045186ca94ca02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adce71c0256a61db89045186ca94ca02_JaffaCakes118
Size

676KB
MD5

adce71c0256a61db89045186ca94ca02
SHA1

7b46be2ea506319c1bfe02a9c1ebed3b9cd30f9e
SHA256

771b74dfd5bd47285a3593c8b051596fbbef5a1c679c87af0ceccfee938e1953
SHA512

c2492af2a918e72172f5e2bd69f0e43c7420f38bee38043aca27f17de0967ef7471e18dff80a751a6d6ec53c5f378701d5d17f23af0afcea6cb877fae179ba93
SSDEEP

12288:bzlVo88nknDa++69Awnbb1/8G9BCwLx8e1uo5WfRbB1UasKt002:bhVoiDa+/9NnbuG9B6e1HWNUaHx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adce71c0256a61db89045186ca94ca02_JaffaCakes118

Files

adce71c0256a61db89045186ca94ca02_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5320c32fa5b92d40af26784d8a06b50a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rsaenh

CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey

kernel32

GetCurrentThreadId
LoadLibraryW
WriteConsoleA
GetShortPathNameW
CloseHandle
HeapAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreW
LoadLibraryA
CreateProcessA
OpenMutexW
lstrcmp
FindClose

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ