03131261c3cbad179970f40ba81f7953_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03131261c3cbad179970f40ba81f7953_JaffaCakes118
Size

216KB
MD5

03131261c3cbad179970f40ba81f7953
SHA1

61f5b9fbd9d4bce20953f6f2e564593e4022e6bb
SHA256

15607d970e097b8a4676dbd6a2b10dfc2ff1df74095fc8cbfb378c9beb2726c3
SHA512

e42301894bbea3716a2f81218b662f57d04dde08ae22a7035cdf83866e353530cd2e5466804879a3d398af10db3d12932784527c285b49e5c0389718138199fc
SSDEEP

6144:CFcxO6uYq4P7FoX6jWocXQY6jKOfvoRpPX2RV7vp:C1pYq9gY6OOYRlXYV7vp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03131261c3cbad179970f40ba81f7953_JaffaCakes118

Files

03131261c3cbad179970f40ba81f7953_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36cc1c8676ed78b40c6371579735c20c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
GlobalUnlock
SetLastError
GlobalFree
GetModuleHandleA
FindResourceW
CreateFileW
HeapCreate
LoadLibraryExA
lstrlenW
GetStdHandle
GetProcessHeap
GetExitCodeProcess
TlsGetValue
GetCurrentThreadId
TlsAlloc
CloseHandle
CreateMutexA
ReleaseMutex
GetEnvironmentVariableA

user32

CallWindowProcA
CreateMenu
FillRect
DispatchMessageA
GetDlgItem
DrawEdge
CreateWindowExA
GetCaretPos
CheckRadioButton
SetFocus
IsWindow
GetDC
DrawMenuBar

rsaenh

CPSignHash
CPGenKey
CPDeriveKey
CPHashData
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE