ffe74add6183226bbcc9bda4444eeaee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffe74add6183226bbcc9bda4444eeaee_JaffaCakes118
Size

787KB
MD5

ffe74add6183226bbcc9bda4444eeaee
SHA1

a4307749c1b5577b66c3f91ecf91177880a2291b
SHA256

ed1f9e2fbcc088d44e92b9fa3322429b22e491cea73e623c8962b33a327c3541
SHA512

39bff1a0ddb80598e57de9bbfa90929bb805f6954213780f559539772debdf01b1919c83806b2d4ca9ef5ca591e7881f329bcfb87212debce606da4d5b9bd338
SSDEEP

12288:Gd08ZlYH9GGeksaqDuh9W77il7ltBbmGo6LUyHMlM76UP6e8odH+vqJbfq:GWJeLaqDuhYilHB+6LQKLHXhc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe74add6183226bbcc9bda4444eeaee_JaffaCakes118

Files

ffe74add6183226bbcc9bda4444eeaee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f70e0e88e0938f6da991c715bb1e8b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
TerminateThread
SetEnvironmentVariableA
GlobalUnlock
LocalFree
GetCurrentThreadId
CreateMutexA
GetStdHandle
TlsGetValue
GetModuleHandleA
CreateFileA
PulseEvent
ReleaseMutex
Sleep
GetConsoleMode
lstrlen
CloseHandle
LoadLibraryExW
FindResourceA
HeapCreate

user32

DrawEdge
GetIconInfo
DrawMenuBar
DefWindowProcW
CheckRadioButton
GetDlgItem
DispatchMessageA
IsWindow
CallWindowProcA
CopyRect
FillRect
GetDC
SetFocus

uxtheme

GetThemeBool
DrawThemeIcon
GetThemeColor
GetCurrentThemeName
CloseThemeData

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ