82d8e3e3baaeb0a4d93977f4245dfde2_JaffaCakes118 | Triage

Sharing

General

Target

82d8e3e3baaeb0a4d93977f4245dfde2_JaffaCakes118
Size

787KB
MD5

82d8e3e3baaeb0a4d93977f4245dfde2
SHA1

ef6ac4b20015072fd94d4caf7dacc333d8829b14
SHA256

65449ad1981c09005e742886880d3eeacc7d433c95c5735b4f4922a4c278ef92
SHA512

044d13033637d01e43893da5a0910c97a45f6025dd8e4e98aeb4519a072dfed4650ed0c582e4088a9a4b4e31666cf96332dcecab1fd59100380e58bb502e144f
SSDEEP

12288:xWPeqItADJJ5KrpFx1KJeAgZXrpRMrJT7zKBLqacqIWGljsc3F7cAqW6ZMfv4yBk:ye1cJbKrvbArgZpur4lZHGlgC9Oy1bkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d8e3e3baaeb0a4d93977f4245dfde2_JaffaCakes118

Files

82d8e3e3baaeb0a4d93977f4245dfde2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83fd078ca3bb718f4953320e54841c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
HeapCreate
GetModuleHandleA
TlsGetValue
CreateMutexA
GetConsoleMode
LoadLibraryExA
SetLastError
ReleaseMutex
Sleep
CloseHandle
GlobalUnlock
TerminateThread
GetEnvironmentVariableA
PulseEvent
GetACP
CreateFileA
LocalFree
lstrlen
FindClose

user32

GetDlgItem
IsWindow
CopyRect
FillRect
DefWindowProcW
DispatchMessageA
GetIconInfo
SetFocus
CallWindowProcA
GetDC
DrawMenuBar
CheckRadioButton
DrawEdge

uxtheme

DrawThemeIcon
GetCurrentThemeName
GetThemeBool
GetThemeColor
CloseThemeData

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ