a70791093cca890ceb02b318b0a0a020_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a70791093cca890ceb02b318b0a0a020_JaffaCakes118
Size

775KB
MD5

a70791093cca890ceb02b318b0a0a020
SHA1

ce204cd848a9cd6f0b35a29489c5d0783bdc9da9
SHA256

51afa0edd6550c075bca4a83ed7a53f7a74923db961409ac34e45a075e4177e7
SHA512

91b58b0849690e337bc99033e6e26e3e61041b20c084ec0e7c34b0daf2980c3ec4a12127809c0337c71ec290200cf7f2f75e50da8ae7be3e723e1c0a6c3a690a
SSDEEP

12288:gM/U49vNIs+pKF9O2joPF71eNxEkcmlFzSNqrC5r1FFv8ZGHLJhxDIDbKCTkFYMn:gU0KFBsWAmlNYUCR3i+CVKO8a86qOno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a70791093cca890ceb02b318b0a0a020_JaffaCakes118

Files

a70791093cca890ceb02b318b0a0a020_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b93b875bd124d23eaf19904ec82eff38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GlobalUnlock
GlobalFree
TlsGetValue
lstrcpyA
CloseHandle
UnmapViewOfFile
PulseEvent
LoadLibraryExW
SetLastError
GetStdHandle
CreateFileW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetModuleHandleA
lstrlenA
FindResourceW
GetExitCodeProcess
CreateProcessA

user32

DrawEdge
CreateIcon
DispatchMessageA
GetDC
DrawMenuBar
SetFocus
GetCaretPos
CallWindowProcA
GetDlgItem
FillRect
CreateWindowExA
IsWindow
CheckRadioButton

rsaenh

CPSignHash
CPDeriveKey
CPDecrypt
CPGenKey
CPHashData

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE