db43907227bb7a4d48489b7500053aeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db43907227bb7a4d48489b7500053aeb_JaffaCakes118
Size

785KB
MD5

db43907227bb7a4d48489b7500053aeb
SHA1

ffc17e3e55f51a42d7470154407bc02fd828335b
SHA256

27dc402b2f85ced1bf1bab5f0822e7bba03f5981e48db485a33ea6705a7c8421
SHA512

297d9ff13c15a46684a15c0115fca0236f72d7ffba63c3f3003e318ddd318e157a2d9afadfdf785c421add567c45136e9f804edaf87ae4be9d2ce1d3db5174f2
SSDEEP

12288:g8HCWBC7VlT7s4PJFhhptRZcO6cBnGrpK7AvSnefhhSdWp+aE1S0DSjKkcGeMGP0:ghJZlRhXnlBnYcIUihodQ+gKkcGMkAo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db43907227bb7a4d48489b7500053aeb_JaffaCakes118

Files

db43907227bb7a4d48489b7500053aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c47b794da47bec0c87335dc56e2d3108

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetModuleHandleA
FindClose
CreateFileA
GetEnvironmentVariableA
SetLastError
CreateMutexA
FindResourceA
lstrlen
IsBadStringPtrW
ExitThread
LoadLibraryA
GetACP
TlsGetValue
CloseHandle
ReleaseMutex
GlobalUnlock
HeapCreate
DeleteAtom
PulseEvent

user32

DefWindowProcW
CopyRect
GetDC
DispatchMessageA
DrawEdge
FillRect
GetDlgItem
DrawMenuBar
SetFocus
GetIconInfo
IsWindow
CheckRadioButton
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncBool
ASN1BERDecBool
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 777KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ