187bb0d1836e63f48ef97eb03a018126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

187bb0d1836e63f48ef97eb03a018126_JaffaCakes118
Size

141KB
MD5

187bb0d1836e63f48ef97eb03a018126
SHA1

35f8d2ee2540025b20668d3e29839058fd6a1c07
SHA256

caa0e0bd8088b8852d1237d08480573c4e8de5a44d330436d178d636253b55df
SHA512

6b196570146e68aea17288a6f96b63adf9c20c0bcf2eeb5c91791f68d1235db2359d0dd7ed2f846f47c54be713504f57417fb642b4e1d90c14a33b8f3a77d494
SSDEEP

3072:UFHEvxgLEhlLpsdstbsJjxH2lsIgGmPwid7dKAxuhkfp3gQdRvoEtEJksWmeH:VvxgLE6dsJA2ls9GmPFdJNgQD1ihWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
187bb0d1836e63f48ef97eb03a018126_JaffaCakes118

Files

187bb0d1836e63f48ef97eb03a018126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

954c92ea3a031ff42ac6bdc4cea7b611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VerifyConsoleIoHandle
GetConsoleCharType
GetCalendarInfoA
FindNextVolumeW
WriteFileEx
InterlockedExchange
GetLogicalDriveStringsW
InitAtomTable
CreateSemaphoreW

user32

SetWindowContextHelpId
SetUserObjectSecurity
HiliteMenuItem
GetDoubleClickTime
GetKeyboardType
FindWindowA
DdeConnect
DdeQueryConvInfo
SetCaretBlinkTime
CheckMenuRadioItem
GetCursorFrameInfo
EnumWindowStationsW

Sections

.text
Size: 9KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ