77922f0db5c6bc1579f6d87843125141_JaffaCakes118 | Triage

Sharing

General

Target

77922f0db5c6bc1579f6d87843125141_JaffaCakes118
Size

787KB
MD5

77922f0db5c6bc1579f6d87843125141
SHA1

5f69fba14959ca3c06b79cb3a1441e3442b1b0f5
SHA256

199a3ae731cf721c6125b994e1f339dac071af81a28cb513606d3860ceecc651
SHA512

04ed34e0e0f6f731f8b7b9154f5ae07b4b4c4025a49ef8bfe1ac1f2179fa17248fcbd2811bab4d7cb3c7c8bde65281cce42ce0da6f4ccada34e00a9f75e46761
SSDEEP

24576:6Sfpm9WsY3yFQ7t4st3fS9k7E9xPEhYM/r5QpbjEpRe:npeWdWst3akozEhYMipXE3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77922f0db5c6bc1579f6d87843125141_JaffaCakes118

Files

77922f0db5c6bc1579f6d87843125141_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c664481b995995fa4a3e0ed96d65f1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
Sleep
TerminateThread
FindResourceA
ReleaseMutex
lstrlen
GetConsoleMode
TlsGetValue
GetEnvironmentVariableA
HeapCreate
SetLastError
CloseHandle
FindClose
GetACP
GlobalUnlock
GetModuleHandleA
PulseEvent
LocalFree
LoadLibraryW
CreateMutexA

user32

IsWindow
SetFocus
CheckRadioButton
DefWindowProcW
CopyRect
CallWindowProcA
GetIconInfo
DispatchMessageA
GetDlgItem
GetDC
FillRect
DrawEdge
DrawMenuBar

uxtheme

DrawThemeIcon
GetCurrentThemeName
GetThemeBool
CloseThemeData
GetThemeColor

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ