10c1d7a041ee9a19bcf1f1834f0e8e9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10c1d7a041ee9a19bcf1f1834f0e8e9a_JaffaCakes118
Size

65KB
MD5

10c1d7a041ee9a19bcf1f1834f0e8e9a
SHA1

4b26c6452f51a1a621acc7b98ac1782d188f8cb9
SHA256

c3c0dd022dec6c38c2e8cac5c454f021accaa40cfa29dd0b8eeb418f246ea92a
SHA512

c9405e347293b46889d54f59e2b410011a9f75af9fb81e2652326689d141e878e165c2d015511d4bcadfb8a5b772bbb089f77d4e189a7bf9ad67040a27983950
SSDEEP

768:9fE7Zh/TswD8sU5vLMu7PAiRKZ20u1tgfAyEP19R0Z5uSvk0BN1Nm0XRY:9fE7X9D8sMMOPAoKu/aY14LxMQLXR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c1d7a041ee9a19bcf1f1834f0e8e9a_JaffaCakes118

Files

10c1d7a041ee9a19bcf1f1834f0e8e9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6c8f9a2cdd71e1c6c79ef1d131b23b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
CreateProcessA
HeapCreate
GetCurrentDirectoryA
SetLastError
FindResourceW
LocalFree
CreateFileW
UnmapViewOfFile
GetComputerNameA
GetModuleHandleA
Sleep
CloseHandle
lstrcpyA
GetCurrentThreadId
GlobalUnlock
lstrlenA
LoadLibraryExW
FindClose
PulseEvent

user32

IsWindow
GetDlgItem
DrawEdge
GetDC
FillRect
GetCaretPos
CreateWindowExA
CallWindowProcA
CheckRadioButton
SetFocus
DispatchMessageA
DrawMenuBar
CreateIcon

rsaenh

CPGenKey
CPDecrypt
CPSignHash
CPHashData
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE