c90a5fcbf5f814cbc2059f3eb12e8d7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c90a5fcbf5f814cbc2059f3eb12e8d7b_JaffaCakes118
Size

364KB
MD5

c90a5fcbf5f814cbc2059f3eb12e8d7b
SHA1

2795e26b330cf31b311782ce5995f1c3c242596b
SHA256

cb6492a28a1c4449a156a886ccdbc8cc1c8301be67b328cd4ffad3e41b0c2257
SHA512

fb855b177be82ba759a8f5bc624131b97f25c7e13cb513104e6f87a8d41f88891f8355b5088214c6043b82c3f4039788b676dbee5fc61224a0de87e6c98191f9
SSDEEP

6144:/wRfGBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosq:/wRA5j3CcxR0e7Uc7MOJIP1WGzUdNiCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90a5fcbf5f814cbc2059f3eb12e8d7b_JaffaCakes118

Files

c90a5fcbf5f814cbc2059f3eb12e8d7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b05154a8a8d4adacdd9aa017f92b4fae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetTickCount
FindClose
GetACP
TlsGetValue
CreateProcessA
GetModuleHandleA
ReleaseMutex
GlobalUnlock
HeapCreate
GlobalFree
PulseEvent
SetLastError
CreateFileA
LoadLibraryA
CreateMutexA
FindResourceA
GetEnvironmentVariableA
ExitThread
DeleteAtom

user32

GetDC
IsWindow
DispatchMessageA
DrawEdge
GetDlgItem
CopyRect
DefWindowProcW
SetFocus
GetIconInfo
DrawMenuBar
CheckRadioButton
FillRect
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ