62a04a83c35af5b439b85e48cbf44974_JaffaCakes118 | Triage

Sharing

General

Target

62a04a83c35af5b439b85e48cbf44974_JaffaCakes118
Size

63KB
MD5

62a04a83c35af5b439b85e48cbf44974
SHA1

aa0decc50e0b91bef1e6fac818e3ed819b6006ce
SHA256

7349f7861ff04685f6b66fe11b7649f8eea384a14e5a11d82f1d364cbb5f43e4
SHA512

a1c464375db901d437bc8c7cf33da8a42cd50d3ffa7fd2e118e373b4051f82e2ee85ef3d47536c771d6a4297b141a32a171731cf8a237252f2780433ae98f300
SSDEEP

768:W8Bw157q8u/0KmuPAbebeqa739f0SY29+Ptx9Eu8Bw157q8u+0KmuPAbebeqa73b:W8+nG2AfCqarm2euu8+nGXAfCqarmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62a04a83c35af5b439b85e48cbf44974_JaffaCakes118

Files

62a04a83c35af5b439b85e48cbf44974_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1f829290be49ac9aba0623a777c5074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SetLastError
ReleaseMutex
CreateFileA
GetACP
LoadLibraryW
IsBadStringPtrW
GlobalUnlock
GetEnvironmentVariableA
CloseHandle
GetModuleHandleA
TlsGetValue
FindClose
lstrlen
CreateMutexA
PulseEvent
Sleep
TerminateThread
HeapCreate
LocalFree

user32

CallWindowProcA
GetDlgItem
DrawEdge
GetIconInfo
DrawMenuBar
GetDC
IsWindow
CheckRadioButton
DispatchMessageA
SetFocus
FillRect
CopyRect
DefWindowProcW

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecNull

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE