8a0ea706bb271df91409ca411e3640bd_JaffaCakes118 | Triage

Sharing

General

Target

8a0ea706bb271df91409ca411e3640bd_JaffaCakes118
Size

370KB
MD5

8a0ea706bb271df91409ca411e3640bd
SHA1

686d79d068b6a7e30b6683b951018042330f1bfe
SHA256

ea86dff6356db3213fc39a281996c099e0e99913d8f92d5c6529f5b88b91fdaa
SHA512

608acc65c90a173bc57ac80aac0a56df7debe5bfcc47cf55cb28a3ee18d254d721036b7793d0acd2050e5631f7c53e5da72a7fd31a64834d6b22e3300a5aadb0
SSDEEP

6144:9HLxaJhpWyfvKD0rUlEvffY32+aIxRsoyEh7v3PrBqMgZHeJK0B+XOw6:94h8sv8EXfYm+TxGzEV9YEBmO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a0ea706bb271df91409ca411e3640bd_JaffaCakes118

Files

8a0ea706bb271df91409ca411e3640bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adaac43ce70658f3782839adeca65b7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
UnmapViewOfFile
lstrlenA
GlobalFree
HeapCreate
lstrcpyA
GetExitCodeProcess
FindResourceW
GetModuleHandleA
SetLastError
GlobalUnlock
GetCurrentThreadId
GetStdHandle
TlsGetValue
GetProcessHeap
GetEnvironmentVariableA
CreateProcessA
CloseHandle
ReleaseMutex
LoadLibraryExW

user32

GetDlgItem
CheckRadioButton
DrawEdge
FillRect
DrawMenuBar
CreateWindowExA
GetCaretPos
DispatchMessageA
CallWindowProcA
SetFocus
IsWindow
GetDC
CreateIcon

rsaenh

CPSignHash
CPHashData
CPGenKey
CPDeriveKey
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ