188b52b6cb0c974f960a720dc92034d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188b52b6cb0c974f960a720dc92034d0_JaffaCakes118
Size

305KB
MD5

188b52b6cb0c974f960a720dc92034d0
SHA1

bf963af732af5ea75e4d5b6416bd02dd827598bd
SHA256

83dbf3b22d6372fe8c85eb660e9319f72a672f9fbba616d522b61ffd400ed5ca
SHA512

286e39973a4ab24ae3ade2c53b7c599c4a35bda34b9eeda3be74f7328ea6b8fa2c41844c8867a0e575267db53132d7221d56a8a3cf255da4152d33cd76685ac2
SSDEEP

6144:U13G0kSqdNKK/FNkRYPoGphe/ibNkeWL2UlFkA1hwoNmPPqhw6RpvKvo8:CAJNKK/ICdbjPrC9hxpP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188b52b6cb0c974f960a720dc92034d0_JaffaCakes118

Files

188b52b6cb0c974f960a720dc92034d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bad805cf6d71ec36de7430a9076dd5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
TlsGetValue
GetEnvironmentVariableW
LocalFree
WriteFile
FindClose
InitializeCriticalSection
HeapCreate
ReleaseMutex
LoadLibraryW
FindAtomA
GetFileTime
GetPrivateProfileStringA
GetDriveTypeA
ReleaseMutex
GetCurrentProcessId
IsBadStringPtrW
CreateEventW
GlobalFlags
lstrlenW

user32

DispatchMessageA
CallWindowProcW
GetClientRect
GetKeyboardType
GetSysColor
DrawStateW
GetSysColor
DrawTextA
GetClassInfoA
IsWindow
EndDialog
CreateWindowExA
SetFocus

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ