345463e51b496dd0be1f2f9e6df7ac6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

345463e51b496dd0be1f2f9e6df7ac6d_JaffaCakes118
Size

347KB
MD5

345463e51b496dd0be1f2f9e6df7ac6d
SHA1

bff1330acb12dfd492ffa3e9be4dc251955da359
SHA256

518f200e794af5355dbda5b5a0efc44b0c1710bbf886a367facbb8a40950c5a8
SHA512

7508a9baebc2ed147bf2dc67bdd1dbb1b84d484ea02bfad6d7412abcea36fd4b681c328d2cb8127fd417e4810d98da5bca7344c7b3ed3f7f1a16c833a927819d
SSDEEP

6144:hBnuaNawMe14e04cm4uI0WjBntYzTSk+eWV85/gEADbwYH2L8sPMQL:3uKceGW4uI9nJkga5/wbHPsEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345463e51b496dd0be1f2f9e6df7ac6d_JaffaCakes118

Files

345463e51b496dd0be1f2f9e6df7ac6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6a30511e24ad7a8b6fd91765a4f3de9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
PulseEvent
GetCurrentThreadId
GlobalUnlock
GetComputerNameA
LocalFree
LoadLibraryExW
GetModuleHandleA
SetLastError
GetCurrentDirectoryA
CreateFileW
UnmapViewOfFile
GetCommandLineA
CreateProcessA
lstrlenA
CloseHandle
lstrcpyA
Sleep
HeapCreate
FindClose

user32

GetCaretPos
GetDlgItem
CheckRadioButton
DrawMenuBar
GetDC
FillRect
CreateIcon
DispatchMessageA
DrawEdge
CreateWindowExA
CallWindowProcA
IsWindow
SetFocus

rsaenh

CPSignHash
CPDeriveKey
CPGenKey
CPHashData
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ