876b231c3b5303693eb9f2f406e69fed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

876b231c3b5303693eb9f2f406e69fed_JaffaCakes118
Size

365KB
MD5

876b231c3b5303693eb9f2f406e69fed
SHA1

019aed183af409ed51766b0b44ab8d0e1a70dd79
SHA256

2c1e69a163878d850a6b2de00585b06a6b4e4a1862cc5e695cc0ae0d28b614d3
SHA512

26d5bd017f58980f7a15c5a76408012e508ea216e0bf98903d132f049d61ee3747651c5e505825ea973d8fdf4094d725881d02d5e83b7693c924128732b13305
SSDEEP

6144:Cn0vyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:uLMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876b231c3b5303693eb9f2f406e69fed_JaffaCakes118

Files

876b231c3b5303693eb9f2f406e69fed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48051161336587949f90b1bfbb65b5d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
PulseEvent
GetTickCount
GetModuleHandleA
ExitThread
FindClose
DeleteAtom
LoadLibraryA
GlobalFree
GetEnvironmentVariableA
CreateMutexA
IsBadStringPtrA
ReleaseMutex
CreateFileA
GlobalUnlock
TlsGetValue
GetACP
SetLastError
HeapCreate
FindResourceA

user32

FillRect
GetDC
CheckRadioButton
SetFocus
IsWindow
DefWindowProcW
GetIconInfo
DrawMenuBar
DrawEdge
CallWindowProcA
GetDlgItem
CopyRect
DispatchMessageA

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ