e9e34e4aa80e265b7cb142b7bd7df373_JaffaCakes118 | Triage

Sharing

General

Target

e9e34e4aa80e265b7cb142b7bd7df373_JaffaCakes118
Size

396KB
MD5

e9e34e4aa80e265b7cb142b7bd7df373
SHA1

d72e3b9c1f1cf95a048698c43240a96aa8746d6c
SHA256

5a653fe8dff300dba4b1f5aae0a726535bb27049ed127bfa3634c822c30e53ed
SHA512

1ff64e7ab3b8727557acaf475ce6f9286f0dd7fe6593b89a5d0bbb9032878374aa5be259eab4018df66e607328c5226777065e61d7f6da4fb6d239c9f2d8474a
SSDEEP

6144:VcfwgI/fePoLPq/pstFxjGRyxqpgkwbcRltEmTfNllb98QOy87n2H8FDkSC:bZePoLc2LA8xqpbR1E41llprU7nTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e34e4aa80e265b7cb142b7bd7df373_JaffaCakes118

Files

e9e34e4aa80e265b7cb142b7bd7df373_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4c0d51e9f8801b2d387746203f010d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindClose
GetModuleHandleA
LoadLibraryExW
lstrlenA
FindResourceW
UnmapViewOfFile
SetLastError
GetCurrentDirectoryA
CreateProcessA
CreateFileW
HeapCreate
GetCurrentThreadId
GlobalUnlock
GetCommandLineA
LocalFree
PulseEvent
GetComputerNameA
Sleep
lstrcpyA

user32

CheckRadioButton
GetDC
GetDlgItem
GetCaretPos
CreateWindowExA
FillRect
DrawMenuBar
DrawEdge
SetFocus
CreateIcon
CallWindowProcA
DispatchMessageA
IsWindow

rsaenh

CPGenKey
CPDeriveKey
CPSignHash
CPDecrypt
CPHashData

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 785KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE