8c5d4097493b04a809da6e3130c2420c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c5d4097493b04a809da6e3130c2420c_JaffaCakes118
Size

364KB
MD5

8c5d4097493b04a809da6e3130c2420c
SHA1

f31bfc8befb19db29e8d9efbf99f7adec650b252
SHA256

27fc71d1749c72ef2078a93809654c749257efaf3235d73bb3662515f5090c14
SHA512

b2b309175e99e3f49aee34cf6d9e8f3ac04dbd93f98c3588f2fa0a80694694b4b23d2c22981f8763388adbc842394604b4c98850ca8322897e0bed7a2510707a
SSDEEP

6144:dyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:AMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c5d4097493b04a809da6e3130c2420c_JaffaCakes118

Files

8c5d4097493b04a809da6e3130c2420c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d92ddea1bf8fd97ba8339029a8f4ca0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
LoadLibraryA
HeapCreate
ExitThread
DeleteAtom
CreateMutexA
SetLastError
GetEnvironmentVariableA
TlsGetValue
FindClose
CloseHandle
GlobalUnlock
GlobalFree
ReleaseMutex
PulseEvent
FindResourceA
lstrlen
IsBadStringPtrW
GetModuleHandleA

user32

DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcW
GetDlgItem
CallWindowProcA
SetFocus
FillRect
CopyRect
DrawMenuBar
GetDC
DrawEdge
CheckRadioButton

msasn1

ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ