6016bccd0d1aa974bf835d8b66b3e2a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6016bccd0d1aa974bf835d8b66b3e2a8_JaffaCakes118
Size

56KB
MD5

6016bccd0d1aa974bf835d8b66b3e2a8
SHA1

c2e5bc801e231fe65007e5d4b518e6fe8421554f
SHA256

36971312d7da6db6c2b78b59845e67e44467842db4b48d4e5d620c46247b9abf
SHA512

a37e9c55d6d89acf1f04b08285c3a9026ad5050816fe813738db821c4ad293600fdee666e30903ec5b6d71f35e9616fa884cc5543afc7effe58cd8be1d187edd
SSDEEP

768:Kcn57q8uX7BGdFdN6r9iXW9ofVj3lU8olTRdRlKHeG/KlM5eJ1z7OYhLgh:x5GRkd1jm9oF3lE7R0HeRlM5fWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6016bccd0d1aa974bf835d8b66b3e2a8_JaffaCakes118

Files

6016bccd0d1aa974bf835d8b66b3e2a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c6f0c8dcc557e3164fcb1b04298d946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
FindResourceA
LocalFree
CreateFileA
IsBadStringPtrW
GetModuleHandleA
HeapCreate
CloseHandle
lstrlen
Sleep
GetACP
TerminateThread
SetLastError
ReleaseMutex
PulseEvent
GlobalUnlock
FindClose
LoadLibraryW
TlsGetValue
GetEnvironmentVariableA

user32

DispatchMessageA
CallWindowProcA
DrawEdge
GetDC
IsWindow
FillRect
DrawMenuBar
SetFocus
DefWindowProcW
GetIconInfo
CopyRect
GetDlgItem
CheckRadioButton

msasn1

ASN1BEREncEoid
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE