fa2ce89671daef2075428492b43c3e50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa2ce89671daef2075428492b43c3e50_JaffaCakes118
Size

370KB
MD5

fa2ce89671daef2075428492b43c3e50
SHA1

029785103d6b4456e4d5c6f2e0ce6326a55cb5ea
SHA256

da3551eee27b5692985f34efc9060217c707ddb981550f9f1c5f49212d0550f4
SHA512

34ee851869a2cdfc9e7f9514d495f19be1cdf351447b4b4470f61bfb75de2ccc87abdf8951292f067f2121b93bba059bb958bcfbc0f4bf0d14e4715719e48cf8
SSDEEP

6144:Hf4M8XNbk3HyKj+Imup/1N0U4tfMEzQoslcCNiDUkCtsp31g2D3:QM8XhGHyKjFPpqtcokNYUkJhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa2ce89671daef2075428492b43c3e50_JaffaCakes118

Files

fa2ce89671daef2075428492b43c3e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b125900ba50679f9928ed966669b53e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetEnvironmentVariableA
CreateFileA
CloseHandle
GlobalFree
GetStdHandle
GetModuleHandleA
lstrlenW
GlobalUnlock
FindResourceW
LoadLibraryExA
SetLastError
HeapCreate
GetCurrentThreadId
CreateMutexA
GetExitCodeProcess
DeleteAtom
TlsAlloc
TlsGetValue
ReleaseMutex

user32

SetFocus
GetCaretPos
GetDlgItem
FillRect
CreateMenu
DispatchMessageA
IsWindow
CreateWindowExA
DrawMenuBar
CallWindowProcA
GetDC
CheckRadioButton
DrawEdge

rsaenh

CPSignHash
CPGenKey
CPDeriveKey
CPHashData
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ