aeed4d7ff72dc6186d513d8b2ac7946e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeed4d7ff72dc6186d513d8b2ac7946e_JaffaCakes118
Size

365KB
MD5

aeed4d7ff72dc6186d513d8b2ac7946e
SHA1

8f7de7006e23aa0cc8c0fd68614c661829759c4a
SHA256

f5c5eaa9303d2993c67380fc837b3081d318acd160df0ffde832ee354eac3cbb
SHA512

018a8f718d0750c31877c943ba7c4fce6f7c00ad53baed8e4ab8b757705d0ca7c541f684a4da1082d1fa86fc2f17be96439d8cc0e9ad3ef1cf8b60f90c4c3a3f
SSDEEP

6144:IKBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmNfN:Ic5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeed4d7ff72dc6186d513d8b2ac7946e_JaffaCakes118

Files

aeed4d7ff72dc6186d513d8b2ac7946e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d096ba9a35119f008feea480a165f177

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
LoadLibraryA
SetLastError
GlobalFree
PulseEvent
GetModuleHandleA
DeleteAtom
IsBadStringPtrA
ExitThread
GetEnvironmentVariableA
CloseHandle
GetACP
FindClose
CreateFileA
HeapCreate
FindResourceA
GetTickCount
CreateMutexA
ReleaseMutex
GlobalUnlock

user32

CopyRect
SetFocus
IsWindow
GetIconInfo
DefWindowProcW
DrawMenuBar
DispatchMessageA
GetDC
GetDlgItem
DrawEdge
CallWindowProcA
FillRect
CheckRadioButton

msasn1

ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ