b768ff177d7c5261ae1dbdd8ad95aec2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b768ff177d7c5261ae1dbdd8ad95aec2_JaffaCakes118
Size

63KB
MD5

b768ff177d7c5261ae1dbdd8ad95aec2
SHA1

eb819cba0688895f85034c7ae04e14b3b2cdbfe4
SHA256

11a5bf3faab0124724cd750b59702f2758d7db292d27dad82e0903ecafd15892
SHA512

7ed8a4c16a6decef235ce20e8e7897b5bc8b84bd2e854cd4a6b95fc3503340c292cf108114341786ba582b2a5f917789037439a13b9cb4ff074bb0368e3ab496
SSDEEP

1536:qlCGxVwHKCqarm2euXqdddddddddddddddddddddddddddddddddddddddddddd8:qkGzuKTvQXNYD2qbj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b768ff177d7c5261ae1dbdd8ad95aec2_JaffaCakes118

Files

b768ff177d7c5261ae1dbdd8ad95aec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12f2595d46d7e218a0a215ca66fb8933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
GetEnvironmentVariableA
FindClose
GetACP
FindResourceA
lstrlen
GlobalUnlock
GetModuleHandleA
LoadLibraryW
LocalFree
HeapCreate
ReleaseMutex
Sleep
PulseEvent
CloseHandle
TlsGetValue
CreateMutexA
TerminateThread
SetLastError
CreateFileA

user32

DrawMenuBar
SetFocus
DefWindowProcW
CheckRadioButton
GetIconInfo
GetDlgItem
CallWindowProcA
DrawEdge
DispatchMessageA
CopyRect
GetDC
FillRect
IsWindow

msasn1

ASN1BERDecNull
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ