a1750987bebe3d3c0d8eaa3177f6105c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1750987bebe3d3c0d8eaa3177f6105c_JaffaCakes118
Size

786KB
MD5

a1750987bebe3d3c0d8eaa3177f6105c
SHA1

2615ac2718bc4c19291d318864abde4a0fe739aa
SHA256

9bbf53018798bca65b992f462f12c4a87a7bc84e9f4ad4772c0d55ef7f34076f
SHA512

0ce668e140a0b162bd292cac4f1f8c82e1cafc47bd12a9686f08a6614953d5d0b812110398cfff660de23d865d0155bc573c297042348f5000edc112827fe95d
SSDEEP

24576:0kw78cboanxrr4/XRIN/l6Dy/3JR3VWYnQZcROC/p:0kr2oaxgRIGy/3D3nFXR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1750987bebe3d3c0d8eaa3177f6105c_JaffaCakes118

Files

a1750987bebe3d3c0d8eaa3177f6105c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

898934c54ec8ef5f1245bcb2fdd467f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
TlsGetValue
PulseEvent
GetEnvironmentVariableA
DeleteAtom
GetModuleHandleA
GlobalFree
GetTickCount
ReleaseMutex
SetLastError
GetACP
IsBadStringPtrA
CloseHandle
ExitThread
CreateFileA
CreateMutexA
GlobalUnlock
HeapCreate
LoadLibraryA
FindClose

user32

CopyRect
SetFocus
GetDlgItem
DefWindowProcW
FillRect
CheckRadioButton
DrawMenuBar
GetIconInfo
GetDC
DispatchMessageA
CallWindowProcA
IsWindow
DrawEdge

msasn1

ASN1BERDecCheck
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ