a60f43723d6f094731eb99c358d7ce7f_JaffaCakes118 | Triage

Sharing

General

Target

a60f43723d6f094731eb99c358d7ce7f_JaffaCakes118
Size

63KB
MD5

a60f43723d6f094731eb99c358d7ce7f
SHA1

7027247cd667025be6302b980e6fc5d095da78bd
SHA256

a068f753b4e687d430762499ea6e3171af18896f98481bbbcd79894a856e1933
SHA512

3e43efdda2c74a8b32f9413c14f9d38069caf5d45732b5f55fb39fd5a3a3caba9e63d38053da125cf43060b1bd782a7795703b7fa2dfd9322d41b891cdc0a404
SSDEEP

768:7nHS57q8u+ZS1eAbebeqa739f0SY29+Ptx9EUnHS57q8u+ZeSZx1eAbebeqa739t:7nHsGEZFCqarm2euUnHsGEZhMCqarmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a60f43723d6f094731eb99c358d7ce7f_JaffaCakes118

Files

a60f43723d6f094731eb99c358d7ce7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f3ad6165d4735a58f98c0ee207b2ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
IsBadStringPtrW
lstrlen
HeapCreate
PulseEvent
FindClose
TlsGetValue
CloseHandle
CreateFileA
GetACP
TerminateThread
GetModuleHandleA
GetEnvironmentVariableA
Sleep
CreateMutexA
ReleaseMutex
LoadLibraryW
GlobalUnlock
LocalFree
FindResourceA

user32

SetFocus
GetDlgItem
CopyRect
CallWindowProcA
DefWindowProcW
GetDC
GetIconInfo
FillRect
DrawMenuBar
DispatchMessageA
CheckRadioButton
DrawEdge
IsWindow

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE