1b41c3339c2ea4b11a6bf39c8d66f24c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b41c3339c2ea4b11a6bf39c8d66f24c_JaffaCakes118
Size

134KB
MD5

1b41c3339c2ea4b11a6bf39c8d66f24c
SHA1

a13f635ad068f5ee466d88c38004b05ec8bd3b62
SHA256

7d605ba30c11d9c09318e051424eb1e91a0d84f41aa82a43f934869725c49a31
SHA512

d4e778b083858554df1c916ea4603d5fc9b86d1108d1f507e9fa6817d8eb36303887e0fe9cc8c6d4abad2a1bdf0b6f016be6016fe0ebf1a698326fa700a339d5
SSDEEP

3072:qlsqbj8uZ7Ge6gwi1z32HSziRSnqo57dum8d9/iq:1tuZ9wiBIR+qsiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b41c3339c2ea4b11a6bf39c8d66f24c_JaffaCakes118

Files

1b41c3339c2ea4b11a6bf39c8d66f24c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8897094c14e2b073ef49397f45dd20e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\GczfgnCZFoW\BxjdzeywxR\yfrqosJgwndxo\iBayiqhyF\SnsdfhUABsi.pdb

Imports

gdi32

SetBrushOrgEx
SetTextAlign
BitBlt
CreateSolidBrush
GetBitmapBits

shlwapi

ChrCmpIW
UrlGetLocationW

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
wcslen
_initterm
memset
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs

user32

wsprintfW
IsWindow
CreateWindowExW
GetDC
IsWindowVisible
MonitorFromPoint
SendDlgItemMessageA
DispatchMessageA

kernel32

IsBadCodePtr
SizeofResource
LoadLibraryExA
EscapeCommFunction
lstrcmpiW
GetModuleFileNameA
lstrlenA
CreateWaitableTimerA
LoadLibraryA

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idir
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 104KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE