82d9a50f10ba9e3650683888e5a27dbd_JaffaCakes118 | Triage

Sharing

General

Target

82d9a50f10ba9e3650683888e5a27dbd_JaffaCakes118
Size

370KB
MD5

82d9a50f10ba9e3650683888e5a27dbd
SHA1

1b7523df8c380c9858b418ed30c2d2096d522540
SHA256

6fd59496b6a310c90d1c111831f6f039763dfca45e5bab40180bab9c99f423f8
SHA512

004a846f006c0b07d1493175da25dbb10bfe69fc50b8204d53c93a0c422f31f812e80975e97eecf5c385b5e881eabcdbb0579c48104c9169945acc5df3045539
SSDEEP

6144:8f4M8XNbk3HyKj+Imup/1N0U4tfMEzQoslcCNiDUkCtsp31g2Dq:fM8XhGHyKjFPpqtcokNYUkJhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d9a50f10ba9e3650683888e5a27dbd_JaffaCakes118

Files

82d9a50f10ba9e3650683888e5a27dbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b125900ba50679f9928ed966669b53e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetEnvironmentVariableA
CreateFileA
CloseHandle
GlobalFree
GetStdHandle
GetModuleHandleA
lstrlenW
GlobalUnlock
FindResourceW
LoadLibraryExA
SetLastError
HeapCreate
GetCurrentThreadId
CreateMutexA
GetExitCodeProcess
DeleteAtom
TlsAlloc
TlsGetValue
ReleaseMutex

user32

SetFocus
GetCaretPos
GetDlgItem
FillRect
CreateMenu
DispatchMessageA
IsWindow
CreateWindowExA
DrawMenuBar
CallWindowProcA
GetDC
CheckRadioButton
DrawEdge

rsaenh

CPSignHash
CPGenKey
CPDeriveKey
CPHashData
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ