f1b1cbce6d5654745b56f6222da1d2bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1b1cbce6d5654745b56f6222da1d2bc_JaffaCakes118
Size

110KB
MD5

f1b1cbce6d5654745b56f6222da1d2bc
SHA1

731b3fb95ecf97bd8f9106321b312a1b1fbcec60
SHA256

d3f180b3ec5c69e59a1ba287818404a67aec0fd7eed639906bfebd154c2ed672
SHA512

746cb991eae4b06a3d85b37a681ce1355f91b4fc08c44c8b96809cb84071bc593a3be4f05d4ceb3bb05bfa044a47ebc5484e3374e0d06fbbcb98b5326da233dd
SSDEEP

1536:VF5ZX768OpLu059BBevqO6nZ2J+8M8xP/708Tanj91xFURDoq4OZZZLlCIib:jL673/TWjOw3M8508Tanp1xaRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1b1cbce6d5654745b56f6222da1d2bc_JaffaCakes118

Files

f1b1cbce6d5654745b56f6222da1d2bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3258368a5ba6f6ebaf185b861c3b592c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegQueryValueA

comctl32

ImageList_Copy
ImageList_DrawEx
ImageList_LoadImageW
ImageList_Add

gdi32

CreateFontIndirectA
CreateDIBitmap
CreateCompatibleBitmap
GetPixel

user32

GetDlgItem
IsMenu
IsWindow

kernel32

CreateProcessA
GetFileTime
GetLastError
GetStdHandle
GetComputerNameA
ReadFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 15B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ