ae1e295cb3df5f0a513c936c96eb8215_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae1e295cb3df5f0a513c936c96eb8215_JaffaCakes118
Size

63KB
MD5

ae1e295cb3df5f0a513c936c96eb8215
SHA1

27c40c0e6c2f872e2958f96d541cb39dd07ef056
SHA256

0f367f5fa4a6f5eb715ae14fb1ede95dbcb09d8426122cc6ece340eebf725b18
SHA512

5f0b4ab6e5a0963f108499b7d17dda9e24f76d44473e196b10b87a06558be4e8e51af86dcc2d24cfb737db0f8a5663de29b24efcfeb98bb8cfcb8b4dcf2c2fb9
SSDEEP

1536:7nHsGVyCqarm2euXqddddddddddddddddddddddddddddddddddddddddddddddG:LMGVyTvQXNJNdj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae1e295cb3df5f0a513c936c96eb8215_JaffaCakes118

Files

ae1e295cb3df5f0a513c936c96eb8215_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f3ad6165d4735a58f98c0ee207b2ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
IsBadStringPtrW
lstrlen
HeapCreate
PulseEvent
FindClose
TlsGetValue
CloseHandle
CreateFileA
GetACP
TerminateThread
GetModuleHandleA
GetEnvironmentVariableA
Sleep
CreateMutexA
ReleaseMutex
LoadLibraryW
GlobalUnlock
LocalFree
FindResourceA

user32

SetFocus
GetDlgItem
CopyRect
CallWindowProcA
DefWindowProcW
GetDC
GetIconInfo
FillRect
DrawMenuBar
DispatchMessageA
CheckRadioButton
DrawEdge
IsWindow

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE