dcc09f5da397f07718d0aa02c828bf79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcc09f5da397f07718d0aa02c828bf79_JaffaCakes118
Size

65KB
MD5

dcc09f5da397f07718d0aa02c828bf79
SHA1

a320b5bbb978484941d944e5fbb4c618a4f0cee0
SHA256

b0bd73f7f38a1dcb2150d10a08c83f94bc342e027f175fb432e97d5876fd9e70
SHA512

1827e3d0ba2266d4237ccb2f81abc26321f1927e631e724eb4ed9bf00d2321db31ad8ea9148c10cd0c4abf5c554c438ec78352c073898ab34c439d9b4eea9c9e
SSDEEP

1536:yUuejfBj8VgcKsAnuW6geKuwPm4Pk1yIygOdS:yqfiKcKsAnuWxqwm4gTfOdS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc09f5da397f07718d0aa02c828bf79_JaffaCakes118

Files

dcc09f5da397f07718d0aa02c828bf79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30484ba80e636a1e6fa228edc548cf49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetProcessHeap
GlobalUnlock
LoadLibraryExA
GetEnvironmentVariableA
GlobalFree
CreateFileA
TlsGetValue
FindResourceA
HeapCreate
lstrlenW
CloseHandle
TlsAlloc
DeleteAtom
SetLastError
CreateMutexA
GetExitCodeProcess
GetModuleHandleA
GetStdHandle
ReleaseMutex

user32

CallWindowProcA
FillRect
DrawMenuBar
SetFocus
CreateWindowExA
IsWindow
GetDC
GetDlgItem
CreateMenu
CheckRadioButton
GetCaretPos
DispatchMessageA
DrawEdge

rsaenh

CPDecrypt
CPGenKey
CPSignHash
CPHashData
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE