742fb1a4f61ecc1ee7f26dcc0e3b7411_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742fb1a4f61ecc1ee7f26dcc0e3b7411_JaffaCakes118
Size

112KB
MD5

742fb1a4f61ecc1ee7f26dcc0e3b7411
SHA1

75d9366fdb38f2561e3b0cbb604e242452f51e27
SHA256

dcc71a292a52372f4810d917ab42a128ab7397854de64c24c9d6349728e08a8f
SHA512

231150d5297739de8d4ce3052a0d5da8e5319b26afe57b8d84239fa76ca0a7e46ca52bd822513315ad1845bc7bf0932e67fd1a46dbb9a9f35c478433f6a66458
SSDEEP

3072:TtGfBfd0yUYl06ZAlzB91zczKuPktGEBfdo:8VuPIeubD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742fb1a4f61ecc1ee7f26dcc0e3b7411_JaffaCakes118

Files

742fb1a4f61ecc1ee7f26dcc0e3b7411_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca5c67ad6f8f040c3ea3714a4a697980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetLastError
LoadLibraryW
lstrlen
GetEnvironmentVariableA
TerminateThread
HeapCreate
GetModuleHandleA
GetACP
IsBadStringPtrW
LocalFree
GlobalUnlock
ReleaseMutex
Sleep
FindResourceA
TlsGetValue
FindClose
CloseHandle
CreateMutexA
PulseEvent

user32

DefWindowProcW
DrawEdge
GetIconInfo
CopyRect
FillRect
SetFocus
DrawMenuBar
CallWindowProcA
GetDlgItem
CheckRadioButton
DispatchMessageA
GetDC
IsWindow

msasn1

ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE