38f9a8fdacedf1488b2ded1340770e10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38f9a8fdacedf1488b2ded1340770e10_JaffaCakes118
Size

787KB
MD5

38f9a8fdacedf1488b2ded1340770e10
SHA1

2da3cec11f7b85babf7aa2a399ba6de0ad0518a1
SHA256

4359b17de649163a9200b46c19cdb2b80c52c6a77db9e8bdc662d25b6fe9a3fc
SHA512

5b5f8588cb1e5c4027fa691eae31e9777a241a44361457a88e5e50ca9f6d5167d4e633eb4f05f3e71efeda0f4d3c1e3f93cd02030ee6b833f36f8a4dbb3b283d
SSDEEP

24576:+nz1H7d2UXJvQrsSsdvbkEhaAB3um48Ghf:+xvXJYXs6zm4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f9a8fdacedf1488b2ded1340770e10_JaffaCakes118

Files

38f9a8fdacedf1488b2ded1340770e10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7b0535cf712dc581d44ea0f7c55da7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
TlsGetValue
CloseHandle
CreateMutexA
Sleep
FindClose
GlobalUnlock
CreateFileA
GetEnvironmentVariableA
TerminateThread
FindResourceA
lstrlen
IsBadStringPtrW
LoadLibraryW
GetModuleHandleA
PulseEvent
GetACP
LocalFree
SetLastError
ReleaseMutex

user32

CopyRect
DefWindowProcW
GetDC
GetIconInfo
IsWindow
GetDlgItem
SetFocus
DrawMenuBar
FillRect
CallWindowProcA
DrawEdge
CheckRadioButton
DispatchMessageA

msasn1

ASN1BERDecCheck
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ