1b548c355081c089ea41aaaddd61178e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b548c355081c089ea41aaaddd61178e_JaffaCakes118
Size

81KB
MD5

1b548c355081c089ea41aaaddd61178e
SHA1

76a78284d7192b85bf1b274480e0232fe62a6162
SHA256

6965dc5acb7d1cfafd6ef565fd836909ff677ef2c41a5413c1516f15296ebbff
SHA512

f85f2b6c8ac35d16ae249ceed1543d6820484040729c28be1615471ea5be815662269b88afd946c7f61106668ea1fb573b1ab5d31734a19d2132b951e05df6b3
SSDEEP

1536:iFy9gKphwOTnMX2LfCi6bdjiIEfJfhFm2wkJNmf6oJNXy9eYs3Es+9/o:iFbKpPTnMEDIoJA2HEXaeJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b548c355081c089ea41aaaddd61178e_JaffaCakes118

Files

1b548c355081c089ea41aaaddd61178e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f49b776c18ef6494dabb67a03c819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE