8be3b9360a6817bb58f275807754a1a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8be3b9360a6817bb58f275807754a1a9_JaffaCakes118
Size

56KB
MD5

8be3b9360a6817bb58f275807754a1a9
SHA1

39a9e880164bcfd631438503c54253687fc2ede5
SHA256

44bf79b04b347e454e1c76dab35d14579d387bc5115bf3209f71550d47b030ef
SHA512

67e2f5ef1da9aa9e2d043631ae7f39a22a68dc9b2c91e908a4d5f78ceb76ba917a5805d4af93c734bbe775501531a5e0a9857b3eb14f47d78eacf5fba364309f
SSDEEP

768:sp6L57q8uff1dN6r9iXW9ofVj38XXypW9kzileYE+IeF0bbZX7u:6UGd9jm9oF38ILGle/wku

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8be3b9360a6817bb58f275807754a1a9_JaffaCakes118

Files

8be3b9360a6817bb58f275807754a1a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cb3806c22e8dd434291c326e768ffc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
CreateFileA
CloseHandle
IsBadStringPtrW
TlsGetValue
LocalFree
FindResourceA
SetLastError
LoadLibraryW
GlobalUnlock
GetModuleHandleA
lstrlen
PulseEvent
GetEnvironmentVariableA
ReleaseMutex
FindClose
Sleep
HeapCreate
GetACP
CreateMutexA

user32

CopyRect
CallWindowProcA
IsWindow
DrawEdge
CheckRadioButton
DefWindowProcW
DispatchMessageA
SetFocus
FillRect
GetDlgItem
GetDC
GetIconInfo
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE