95f8eeedc8b41ec761c21af800326227_JaffaCakes118 | Triage

Sharing

General

Target

95f8eeedc8b41ec761c21af800326227_JaffaCakes118
Size

786KB
MD5

95f8eeedc8b41ec761c21af800326227
SHA1

9e3306c8c62af6f0d5b8ba7e3638187cbbf5105c
SHA256

4d4842c0fe9705ad51a67af543ae413d46aab6a09e89b90605d84a2a9373193c
SHA512

09d33df89afe861c1bcde21e01a9882d5922591b4a6d352fdc7b78238b7a7d254003a0c72cd2fbf23b1ce78e20d34c23e4029a2d2456586aab278484e30b3ae0
SSDEEP

24576:0bFQUxYWL3km5EKfhnPlLLJ3B2Jm36jLL:0J2YkSF5N/JLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f8eeedc8b41ec761c21af800326227_JaffaCakes118

Files

95f8eeedc8b41ec761c21af800326227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74a4362cbb21e5a31f16ab7aa81525fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileA
CloseHandle
GetModuleHandleA
HeapCreate
GetTickCount
CreateMutexA
PulseEvent
GlobalFree
DeleteAtom
GlobalUnlock
CreateProcessA
FindResourceA
GetEnvironmentVariableA
ReleaseMutex
LoadLibraryA
ExitThread
GetACP
TlsGetValue
SetLastError

user32

GetDlgItem
CheckRadioButton
SetFocus
CopyRect
CallWindowProcA
IsWindow
DrawEdge
GetDC
GetIconInfo
DefWindowProcW
DrawMenuBar
FillRect
DispatchMessageA

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ