a1892f58e1c5c972eae5fbdc31ed23b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1892f58e1c5c972eae5fbdc31ed23b3_JaffaCakes118
Size

365KB
MD5

a1892f58e1c5c972eae5fbdc31ed23b3
SHA1

15c04218c5073ddbc19f1d8065bf1fc286861dd4
SHA256

4e742cc452db3ba74bad41a5eba2ca40de4f7b4c4ee8d46edbe4fd30834f8137
SHA512

c7dd201a79a069098c2ae466d8a980be564b590b4371b4210fd50be6ba4917746327bd99ddee3eccba3a674fdea4c1e9d43f612dfe264c60f6349b473fba7c80
SSDEEP

6144:se4OBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:sJA5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1892f58e1c5c972eae5fbdc31ed23b3_JaffaCakes118

Files

a1892f58e1c5c972eae5fbdc31ed23b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eee1eb1f5c5507bf8032c5856b6dfe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateFileA
GlobalUnlock
LoadLibraryA
CloseHandle
CreateMutexA
CreateProcessA
GetModuleHandleA
GetACP
DeleteAtom
ReleaseMutex
FindResourceA
FindClose
HeapCreate
ExitThread
GetEnvironmentVariableA
PulseEvent
SetLastError
GlobalFree
GetTickCount

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetIconInfo
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
DefWindowProcW
CopyRect

msasn1

ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ