bc79706a442c2654cc7e1ac635e5ee82_JaffaCakes118 | Triage

Sharing

General

Target

bc79706a442c2654cc7e1ac635e5ee82_JaffaCakes118
Size

365KB
MD5

bc79706a442c2654cc7e1ac635e5ee82
SHA1

2916eee282e05c052542c9d5ef3a81ff2595a361
SHA256

e4975e5b5bccdc50e8c202ae057f095b7537a0031313b56d90affe505f40a5d5
SHA512

809172fd76e9e7ab247d3e5647c869a8100191fd8b350334b36a415a4805a1e438dbe0b7bdbe0ea498a0f314db38157fff3f849bd91f745554d775a15837a86d
SSDEEP

6144:ye+OBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:yTA5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc79706a442c2654cc7e1ac635e5ee82_JaffaCakes118

Files

bc79706a442c2654cc7e1ac635e5ee82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eee1eb1f5c5507bf8032c5856b6dfe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateFileA
GlobalUnlock
LoadLibraryA
CloseHandle
CreateMutexA
CreateProcessA
GetModuleHandleA
GetACP
DeleteAtom
ReleaseMutex
FindResourceA
FindClose
HeapCreate
ExitThread
GetEnvironmentVariableA
PulseEvent
SetLastError
GlobalFree
GetTickCount

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetIconInfo
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
DefWindowProcW
CopyRect

msasn1

ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ