214c90e200ba48736acec1dd8a7af19f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214c90e200ba48736acec1dd8a7af19f_JaffaCakes118
Size

365KB
MD5

214c90e200ba48736acec1dd8a7af19f
SHA1

277efafbc14669f7a7bd84839232096ad44ae9f9
SHA256

a716d00a310b70656c936cc2bf9fa8f19e39be1238a53602f0bd53d1a03ddc1a
SHA512

8897707a472ea3de1973981353eec8184e5a47df817810f620a01f78ff4426b8abc0e60c1bdde68740d8ccda77ef798b023944c5a8491b494269adc19093926c
SSDEEP

6144:0snAh8z/W0xLh74H3Iwhp7uzvCKnPpyHbYnemgo3ArW0gRknQ8vVV6k:08Ah8z/W0wH4whp7aaeMHb5mL3ArW0gw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214c90e200ba48736acec1dd8a7af19f_JaffaCakes118

Files

214c90e200ba48736acec1dd8a7af19f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4383cf2fdfd9f2ddfdef44cc40d5739

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SetLastError
TerminateThread
LocalFree
CloseHandle
CreateFileA
ReleaseMutex
SetEnvironmentVariableA
GetCurrentThreadId
lstrlen
GlobalUnlock
LoadLibraryExW
CreateMutexA
GetModuleHandleA
GetConsoleMode
PulseEvent
Sleep
TlsGetValue
HeapCreate
GetStdHandle

user32

GetDlgItem
DrawEdge
CallWindowProcA
DefWindowProcW
FillRect
CopyRect
GetIconInfo
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

uxtheme

GetThemeBool
GetThemeColor
DrawThemeIcon
CloseThemeData
GetCurrentThemeName

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ