3308e9a5df03171b540bad531a33d1ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3308e9a5df03171b540bad531a33d1ec_JaffaCakes118
Size

775KB
MD5

3308e9a5df03171b540bad531a33d1ec
SHA1

240542534ae4dc544166958f6b83464f5f8abb22
SHA256

36f51288279305a2264d91cefe757d03635edb5b14dee76fd7c28e821978ff3d
SHA512

04561cb08fb84206e1f216860d35cefe67adbc08d202788807f5061933d23b6a29f9557e8a0c02672b70f1174ce3e2138545d5b7ff6a9d51471ca517b0648b4e
SSDEEP

24576:SGbeOVsEPFJowyLYEE1qva6aYOfTIGIEcqqAtNO:SGbeOVRFGvLE1PtYQwA3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3308e9a5df03171b540bad531a33d1ec_JaffaCakes118

Files

3308e9a5df03171b540bad531a33d1ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d10b34732d5d9a2cc25cfb20779c81b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetCurrentThreadId
CreateMutexA
LoadLibraryExA
DeleteAtom
SetLastError
CreateFileW
GetModuleHandleA
GetProcessHeap
CloseHandle
GlobalFree
GlobalUnlock
GetEnvironmentVariableA
lstrlenW
TlsAlloc
ReleaseMutex
HeapCreate
FindResourceW
GetExitCodeProcess
TlsGetValue

user32

GetDC
DrawMenuBar
CreateWindowExA
DrawEdge
DispatchMessageA
SetFocus
FillRect
CreateMenu
GetCaretPos
CallWindowProcA
CheckRadioButton
IsWindow
GetDlgItem

rsaenh

CPDeriveKey
CPGenKey
CPDecrypt
CPHashData
CPSignHash

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE