2328e1e45e941168d6c10de49ff8438d_JaffaCakes118 | Triage

Sharing

General

Target

2328e1e45e941168d6c10de49ff8438d_JaffaCakes118
Size

63KB
MD5

2328e1e45e941168d6c10de49ff8438d
SHA1

3298b699e5d1a6a6e8523373e9f4df0977c16bcb
SHA256

a419a487a0ebad3321093e8918cb7145216c523cefaf787f37b2d430a10cdc23
SHA512

1dcf0cf13934b24b211a172d1c7f52f57c297e95aba33e3c0f3ac4c258ae7f8ef2d8a77de42c869de069d81c925aadf4f8824ac797b5fc2f3bc02b60f7a57a26
SSDEEP

768:KDieTh57q8uVhOJ5Abebeqa739f0SY29+Ptx9EkDieTh57q8uNehOJ5Abebeqa7r:KDigGwJxCqarm2eukDigGrZJxCqarmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2328e1e45e941168d6c10de49ff8438d_JaffaCakes118

Files

2328e1e45e941168d6c10de49ff8438d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf2dcad8ddc39d5c92a2c5ce086263a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
lstrlen
LoadLibraryW
CreateFileA
FindClose
FindResourceA
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetACP
LocalFree
HeapCreate
Sleep
CloseHandle
ReleaseMutex
PulseEvent
TerminateThread
CreateMutexA
GlobalUnlock
GetModuleHandleA

user32

CallWindowProcA
SetFocus
IsWindow
DefWindowProcW
CheckRadioButton
DrawMenuBar
DrawEdge
GetIconInfo
DispatchMessageA
FillRect
CopyRect
GetDC
GetDlgItem

msasn1

ASN1BERDecNull
ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE