38e54f5d1ca1113ff5381e6a52787361_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38e54f5d1ca1113ff5381e6a52787361_JaffaCakes118
Size

365KB
MD5

38e54f5d1ca1113ff5381e6a52787361
SHA1

26e992ce0671c0637d98db650fb2155ea3c2f9f6
SHA256

c49b02ed00e7306bba61489d15643fe295af680ccbde1a23cb3d8942ab30e008
SHA512

ebfbd6facb4940289cb884fd7e52d7fd944b4732e6df6330272cee8234e80c5f3d46b92834267f38396b1fbaef97b364ae0f6e27d4e8f69ef453fb18f161f056
SSDEEP

6144:n84Hse+bIZrZL+TnqRTMdDVJJ8pnXunpWH3rF2dWVOfis9yMdnWFJ0htBuNhRI:J+IZQrqRAdD+pXunQ7F2djdIJ0ht6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38e54f5d1ca1113ff5381e6a52787361_JaffaCakes118

Files

38e54f5d1ca1113ff5381e6a52787361_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8af47824bdb976721cf48826074da6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetACP
TlsGetValue
GetEnvironmentVariableA
IsBadStringPtrW
CreateMutexA
TerminateThread
PulseEvent
Sleep
FindResourceA
lstrlen
FindClose
LocalFree
HeapCreate
GlobalUnlock
GetModuleHandleA
CreateFileA
SetLastError
ReleaseMutex
LoadLibraryW

user32

GetIconInfo
FillRect
CopyRect
DrawEdge
DispatchMessageA
CheckRadioButton
GetDC
SetFocus
DefWindowProcW
CallWindowProcA
DrawMenuBar
IsWindow
GetDlgItem

msasn1

ASN1BERDecNull
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ