c902bd0f7c8c336a5e5591cfc9a64405_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c902bd0f7c8c336a5e5591cfc9a64405_JaffaCakes118
Size

775KB
MD5

c902bd0f7c8c336a5e5591cfc9a64405
SHA1

9816c7915437de34c18b101764611bf254ac91f2
SHA256

f8adecca93867e5e73d45157d8f5bbd8d329abaa3a234636e522668fda22cd22
SHA512

356f499428a8cf01bd873ca981bbb73bdd3e66fc327ace30b4ec5fb8fe2753e81341e6013951a5ac617b178c9dac2b81cee914c091f2e10404762bc645c327cd
SSDEEP

24576:ADncSZfe2kAQ3/F8hlDPg5LDzldh3WXfjokLC:3S9pkTChRPg5HzvJWPjokO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c902bd0f7c8c336a5e5591cfc9a64405_JaffaCakes118

Files

c902bd0f7c8c336a5e5591cfc9a64405_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a4f1344d8bca8bf8a2333214c17a029

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GlobalFree
CloseHandle
ReleaseMutex
SetLastError
LoadLibraryExW
GetExitCodeProcess
FindResourceA
VirtualQuery
TlsGetValue
CreateMutexA
lstrlenW
HeapCreate
DeleteAtom
GetStdHandle
SetEnvironmentVariableA
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
GlobalUnlock

user32

DispatchMessageA
DrawMenuBar
CallWindowProcA
GetDC
GetDlgItem
CreateWindowExA
IsWindow
CreateMenu
FillRect
DrawEdge
CheckRadioButton
SetFocus
GetIconInfo

ntshrui

GetLocalPathFromNetResourceA
IsPathSharedW
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
IsPathSharedA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE