8dc4eb3d720c7d391702cdd22e178395_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc4eb3d720c7d391702cdd22e178395_JaffaCakes118
Size

775KB
MD5

8dc4eb3d720c7d391702cdd22e178395
SHA1

77570defb712cef7053ea7f6cbc88f70c2d55f73
SHA256

d8f4e80334fce94dd0a24a36ae78d2900f108ad7b9e9f19c57609bdc3f664a53
SHA512

d591ec1b38473adb98dee22cec375d7f047ae6a289d2cae599c9e19a4a29be34d18eb066a0d6b72a6472c7416073e0f7039086563c88e43778b31af89a5693a4
SSDEEP

12288:Cq7dJmGEmFm80YDPnNRFbCE7dbTtTgmr/PG7QzvJyo9b877IAeaoY0Y:Cq7xE6jNvF5ZgK8QNq7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc4eb3d720c7d391702cdd22e178395_JaffaCakes118

Files

8dc4eb3d720c7d391702cdd22e178395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

966b65611bf197929c49dd2286bc6213

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LoadLibraryExA
ReleaseMutex
CloseHandle
FindResourceA
CreateMutexA
GetStdHandle
GlobalFree
lstrlenW
TlsAlloc
DeleteAtom
GetExitCodeProcess
CreateFileA
GetCurrentThreadId
TlsGetValue
GetProcessHeap
GetModuleHandleA
GlobalUnlock
HeapCreate
GetEnvironmentVariableA

user32

CreateWindowExA
GetDlgItem
CreateMenu
DrawMenuBar
SetFocus
GetDC
FillRect
DispatchMessageA
DrawEdge
CheckRadioButton
CallWindowProcA
IsWindow
GetCaretPos

rsaenh

CPDeriveKey
CPGenKey
CPSignHash
CPHashData
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE