bc79c0850788143605aa38a78f23eb49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc79c0850788143605aa38a78f23eb49_JaffaCakes118
Size

56KB
MD5

bc79c0850788143605aa38a78f23eb49
SHA1

f62f2bb548ff4c8565b3772d452b42f7ea193c7b
SHA256

bb2076da91b2b45a44d1b879942fc1f2d944a8265dbdf0409eb6b626da7df699
SHA512

39f773f25137d11bbb5b687943069cdaae1d2067ee2dd0b20fb1706c4da5d22fbafca69e87e432d0b691e3bcc65dc6c3d0d7c60a9f5b7452f79aec2afcf9a9b8
SSDEEP

768:J3Nl57q8uO2gdN6r9B3Nl57q8uIGGgdN6rt:JlGE2wilGaGGwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc79c0850788143605aa38a78f23eb49_JaffaCakes118

Files

bc79c0850788143605aa38a78f23eb49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d46d1d889c5fa90e3944ca716af7fc89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetACP
ReleaseMutex
GetEnvironmentVariableA
LocalFree
lstrlen
PulseEvent
TerminateThread
GetModuleHandleA
SetLastError
GlobalUnlock
CreateMutexA
TlsGetValue
FindClose
HeapCreate
LoadLibraryW
CreateFileA
CloseHandle
IsBadStringPtrW
FindResourceA

user32

FillRect
GetDC
CopyRect
DrawEdge
GetIconInfo
SetFocus
DispatchMessageA
DefWindowProcW
IsWindow
CallWindowProcA
CheckRadioButton
GetDlgItem
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE