a392e8835dc959ec4f297d0c25ff9051_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a392e8835dc959ec4f297d0c25ff9051_JaffaCakes118
Size

364KB
MD5

a392e8835dc959ec4f297d0c25ff9051
SHA1

4d978d64b6decb60493c796566c5b5f0f394aa8a
SHA256

9eb5c1af7c32f71de988b49d7996b43f67594a619c0b1bb0da58e1ae5befcd0b
SHA512

bfab0de57753abedcf3b0dd75e1c972dce20ea9df241cb55a3d2aff8c47df0306c00ebd905b9496d807ddaf4cd6aa7ba929bc3f6f110154d0c6ec0a603231627
SSDEEP

6144:DuZByXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:D0cMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a392e8835dc959ec4f297d0c25ff9051_JaffaCakes118

Files

a392e8835dc959ec4f297d0c25ff9051_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64f1db18bb9c1c7a4c5c988ffd76d90a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CreateMutexA
DeleteAtom
FindResourceA
GetEnvironmentVariableA
FindClose
GlobalUnlock
LoadLibraryA
HeapCreate
GetModuleHandleA
IsBadStringPtrW
ExitThread
SetLastError
CloseHandle
PulseEvent
TlsGetValue
ReleaseMutex
CreateFileA
GetACP
lstrlen

user32

CallWindowProcA
DrawEdge
SetFocus
DrawMenuBar
GetDlgItem
CopyRect
GetIconInfo
DispatchMessageA
FillRect
GetDC
IsWindow
DefWindowProcW
CheckRadioButton

msasn1

ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ