f97e9aa4792d4038912668453fe6a001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97e9aa4792d4038912668453fe6a001_JaffaCakes118
Size

795KB
MD5

f97e9aa4792d4038912668453fe6a001
SHA1

53edf1ba7184131412829feb19df1a906f10368a
SHA256

5b61c37aec7583822cd276d42c88a0313f8acfbea5a8e24921d2b6653d87813b
SHA512

01a98f33c142de9a2e453b83bef0603b90d0564bef6517324060d62d2a35cbb9b1edb82f0939ed2d8943a7e298b68e425eeb2ff91d80859ac414a0e006f73a19
SSDEEP

24576:ERb5Orp++hjLHtq6rzovMQ6avRYaeSwbrhAKlb1zyp:21mp9O/AaerbrO6b12p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97e9aa4792d4038912668453fe6a001_JaffaCakes118

Files

f97e9aa4792d4038912668453fe6a001_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c39c92acdc3746778e63947879ce69a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalFree
LoadLibraryExW
FindResourceW
CreateFileW
GlobalUnlock
SetLastError
HeapCreate
PulseEvent
GetCommandLineA
Sleep
GetComputerNameA
GetCurrentThreadId
CloseHandle
GetModuleHandleA
GetCurrentDirectoryA
CreateProcessA
UnmapViewOfFile
lstrcpyA
FindClose

user32

DispatchMessageA
GetCaretPos
IsWindow
CreateIcon
CheckRadioButton
SetFocus
DrawMenuBar
CallWindowProcA
CreateWindowExA
GetDC
GetDlgItem
FillRect
DrawEdge

rsaenh

CPHashData
CPDecrypt
CPSignHash
CPDeriveKey
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 785KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE