ee88ab8787fff741b62ef61f4f4aa28e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee88ab8787fff741b62ef61f4f4aa28e_JaffaCakes118
Size

802KB
MD5

ee88ab8787fff741b62ef61f4f4aa28e
SHA1

d25d853e3bb170d2d197c6cc294e353996ac5ca7
SHA256

5f3d286754a8f418510b2a83662d374c994f12588b1e91f1308fd0e1f0a59698
SHA512

fe9630404651fc9bb79a54c9b6def465192e024bf26425780972f6d5e49068c348af4643688981c3c64f716098d4e6a90e68bbf5b615ec4e6e68a6bccf8923f4
SSDEEP

24576:Df1iCfAZPImt0aCPPSZROQCt3EDa3h94MXNaT:5iVZPpWaCPqZROQwX/4kNaT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee88ab8787fff741b62ef61f4f4aa28e_JaffaCakes118

Files

ee88ab8787fff741b62ef61f4f4aa28e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d65967da45b081a96e5d024c4924e9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LoadLibraryExW
CreateProcessA
UnmapViewOfFile
CloseHandle
FindClose
GetComputerNameA
GlobalUnlock
lstrcpyA
CreateFileW
Sleep
GetCommandLineA
HeapCreate
FindResourceW
SetLastError
lstrlenA
GetCurrentDirectoryA
GetModuleHandleA
LocalFree
PulseEvent

user32

GetCaretPos
DrawEdge
DispatchMessageA
FillRect
DrawMenuBar
IsWindow
GetDC
CreateWindowExA
CheckRadioButton
GetDlgItem
CreateIcon
SetFocus
CallWindowProcA

cryptui

CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
WizardFree

msctf

TF_InitSystem

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE