feea7353128e88f89746371aa1ed0bd8_JaffaCakes118 | Triage

Sharing

General

Target

feea7353128e88f89746371aa1ed0bd8_JaffaCakes118
Size

787KB
MD5

feea7353128e88f89746371aa1ed0bd8
SHA1

ec1ee2d5def302c802e082bdc3c23e666ddd0ce4
SHA256

4e83a8bfcb6644150132e7a4bb65fe5a78e8dc66e2df853d9beec41507cf055b
SHA512

6c9a8142a687f96d2b3e96331445e5e2ecde8e9de49bb59571c4d834fcb100eeb35f8980ecb173676d4d41b6fe05270791673d2716243dff11ec8d574254895f
SSDEEP

12288:NghijQCOdjHr+IX+KbmfXNSJYoMRHWvr1q924bvfKlMFtEcoxBSbdFdRU+8jy52:5jFAJX+KbmfdSJYoFvxqglgloxEdno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feea7353128e88f89746371aa1ed0bd8_JaffaCakes118

Files

feea7353128e88f89746371aa1ed0bd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f3acc7d4abb671182ef88c3c47d4bd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
ReleaseMutex
FindResourceA
GlobalUnlock
LoadLibraryExW
TerminateThread
Sleep
CreateMutexA
TlsGetValue
lstrlenW
HeapCreate
PulseEvent
GetConsoleMode
GetStdHandle
LocalFree
SetLastError
CreateFileA
CloseHandle
GetModuleHandleA
GetCurrentThreadId

user32

CallWindowProcA
DrawMenuBar
IsWindow
DispatchMessageA
CheckRadioButton
DefWindowProcW
SetFocus
GetDlgItem
GetIconInfo
FillRect
DrawEdge
GetDC
CopyRect

uxtheme

GetThemeBool
DrawThemeIcon
GetCurrentThemeName
CloseThemeData
GetThemeColor

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ