1b173aec6732e78017a3e98ddbb31f91_JaffaCakes118 | Triage

Sharing

General

Target

1b173aec6732e78017a3e98ddbb31f91_JaffaCakes118
Size

68KB
MD5

1b173aec6732e78017a3e98ddbb31f91
SHA1

58568b36825cb933ae8c261190f7c9e71609d738
SHA256

db2622154ba532562f59eff3cf2c7560cf201136a71830ce65f0885e586910fb
SHA512

1f7f2785236e2936c89874c5b79802fe0c876e6702624f8d64c8d72cc445e912fd188b5da99f379c6aca52199d2467632e2f63b735414fe20361eda1583f5913
SSDEEP

1536:0Zy+1LdpL659f67VE5ZQNxuJGVVgK1WCW8iMP3RhqPiUqp0:0Zy+1PL659fN6uJGwKlviMP3nqi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b173aec6732e78017a3e98ddbb31f91_JaffaCakes118

Files

1b173aec6732e78017a3e98ddbb31f91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0879d8108b941ac9aa947076fbba7cd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CloseClipboard
GetDC
CreateMenu
CreateIcon
GetSysColorBrush
GetActiveWindow
ClientToScreen
CharUpperA

kernel32

VirtualAlloc
LocalAlloc
GetCommandLineA
GetACP
GetEnvironmentStrings
LoadLibraryA
GetProcessHeap
ExitProcess
lstrlenA
GetCurrentProcessId

gdi32

GetObjectA
CreateBrushIndirect
GetBkMode
GetDIBColorTable

Exports

Exports

d3J_oBXVp@12
LDuh3exu3B@12
rBgA9k
cjkNQAHFvrnKm@12
_NVihu_Ppqs@8
QrBplCQt
vKy10Rn3WgHM9@12
X759A4DJ8o@16
lOo5fKS@24
4cvqX0Xg
_3nV6tg1_Kf@20
_smqBE@16
ENdpNi
5erUN2Aq@8
zY89U_pSwF2056
__aLWC7_@16
_OXkKipCr
_rm52F1hK10BO@16
_Cqfcw
3zqH0_shhh@12
mK18EVscxC6IB@4
OTvipKy
9TP8T9JRxIpW@8
UbKRDNRm_p
DoiW3cVf_s@24
_8N7FCXvR@24
_zjpoa7FytAqjx

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 929B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ