baa39a5695261e470867123f7e9b48a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baa39a5695261e470867123f7e9b48a9_JaffaCakes118
Size

365KB
MD5

baa39a5695261e470867123f7e9b48a9
SHA1

71cefc277744a3097f345cc91e6f99d85cecabfb
SHA256

f12bd392c28d89ce48c50ca94f0979a546828447c2e92d728da9bfd166dfe553
SHA512

1edf2ae876e59037359d019f04f2a552264e8b1a7b714c883776a23faae38290030f599f80712a4fcd47fa3b6042009d36650a0d5241263bcfcedc2cf7f9098a
SSDEEP

6144:qe0XOBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosq:q9A5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa39a5695261e470867123f7e9b48a9_JaffaCakes118

Files

baa39a5695261e470867123f7e9b48a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eee1eb1f5c5507bf8032c5856b6dfe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateFileA
GlobalUnlock
LoadLibraryA
CloseHandle
CreateMutexA
CreateProcessA
GetModuleHandleA
GetACP
DeleteAtom
ReleaseMutex
FindResourceA
FindClose
HeapCreate
ExitThread
GetEnvironmentVariableA
PulseEvent
SetLastError
GlobalFree
GetTickCount

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetIconInfo
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
DefWindowProcW
CopyRect

msasn1

ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ