8add53a991f98bf5338ea3f5b46a8b5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8add53a991f98bf5338ea3f5b46a8b5a_JaffaCakes118
Size

365KB
MD5

8add53a991f98bf5338ea3f5b46a8b5a
SHA1

8bb8e30651a777b5e1b1d1bab6ec96c3be8dfa23
SHA256

05de1c3c60ace3ffb4958cb8d9c56c339028fcde154db88861e44ba6500f482c
SHA512

ef3b7b52489a59e0cc38dd5b0a27f21c1e64a2998dbc0a30e93cdf0747b8ff4c78191871f37a94644911dd48e3efd22caad8a566b652dd69ef25753256a4ccb0
SSDEEP

6144:QWZBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmNV:QY5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8add53a991f98bf5338ea3f5b46a8b5a_JaffaCakes118

Files

8add53a991f98bf5338ea3f5b46a8b5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7dd5b45fe4eb1d535208210fe2bcac5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CreateMutexA
LoadLibraryA
GlobalUnlock
CloseHandle
SetLastError
CreateFileA
GetModuleHandleA
FindResourceA
FindClose
ReleaseMutex
GetEnvironmentVariableA
HeapCreate
GlobalFree
DeleteAtom
TlsGetValue
GetACP
ExitThread
PulseEvent
GetTickCount

user32

CallWindowProcA
DrawMenuBar
GetDlgItem
SetFocus
IsWindow
GetIconInfo
CheckRadioButton
DispatchMessageA
DefWindowProcW
DrawEdge
FillRect
GetDC
CopyRect

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecNull

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ