b046193fa8eb78b4a36537e547fbaecb_JaffaCakes118 | Triage

Sharing

General

Target

b046193fa8eb78b4a36537e547fbaecb_JaffaCakes118
Size

364KB
MD5

b046193fa8eb78b4a36537e547fbaecb
SHA1

be79645fe5a5c110492964a8c16db86774cd9ea0
SHA256

0e0b9739b2d284f2bc069a2b0eca8ceec5c43c329984560ac17928a7b5fee14d
SHA512

efd99f9a21424b29d066c50e694d3e51666b0625c3bb8777df2ebdca03707da16104cced8599ea0a5d69ddab808a2d34f757077caa8a26e49887aae5ddcd0b9e
SSDEEP

6144:i7eEyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:JlMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b046193fa8eb78b4a36537e547fbaecb_JaffaCakes118

Files

b046193fa8eb78b4a36537e547fbaecb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90651efabc9125d31bcba82bb33acca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
IsBadStringPtrW
GetACP
SetLastError
CreateMutexA
GetEnvironmentVariableA
CreateFileA
GetModuleHandleA
ReleaseMutex
LoadLibraryA
GlobalUnlock
DeleteAtom
HeapCreate
ExitThread
lstrlen
FindResourceA
TlsGetValue
FindClose
PulseEvent
CloseHandle

user32

CheckRadioButton
GetDC
IsWindow
CallWindowProcA
SetFocus
GetDlgItem
FillRect
DrawMenuBar
DispatchMessageA
GetIconInfo
DefWindowProcW
DrawEdge
CopyRect

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BERDecNull
ASN1BEREncBool
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ