8b200b8bc5eee642fe20cfd48cb5ff2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b200b8bc5eee642fe20cfd48cb5ff2e_JaffaCakes118
Size

63KB
MD5

8b200b8bc5eee642fe20cfd48cb5ff2e
SHA1

3ec131fdaec73f25a63e682e9dbbeb877591a165
SHA256

9d8c27bafc8978cbd605e4d94f9d64b39bdce525de4b27d94ca5ae666cfa925a
SHA512

a9a9f569e1f2a3e46891ead2cb1f01608d030828acf697e4160243120802a3d5242ddda937d884a805a534310601ca915fde065fa7bc45c2767010726c9a5d03
SSDEEP

1536:ClCGP+HVwHKCqarm2euXqdddddddddddddddddddddddddddddddddddddddddd8:CkG21uKTvQXNYD2qbj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b200b8bc5eee642fe20cfd48cb5ff2e_JaffaCakes118

Files

8b200b8bc5eee642fe20cfd48cb5ff2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12f2595d46d7e218a0a215ca66fb8933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
GetEnvironmentVariableA
FindClose
GetACP
FindResourceA
lstrlen
GlobalUnlock
GetModuleHandleA
LoadLibraryW
LocalFree
HeapCreate
ReleaseMutex
Sleep
PulseEvent
CloseHandle
TlsGetValue
CreateMutexA
TerminateThread
SetLastError
CreateFileA

user32

DrawMenuBar
SetFocus
DefWindowProcW
CheckRadioButton
GetIconInfo
GetDlgItem
CallWindowProcA
DrawEdge
DispatchMessageA
CopyRect
GetDC
FillRect
IsWindow

msasn1

ASN1BERDecNull
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE