1b92fed7c4a15308a09f79c99455f51b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b92fed7c4a15308a09f79c99455f51b_JaffaCakes118
Size

273KB
MD5

1b92fed7c4a15308a09f79c99455f51b
SHA1

d98e5781a0fbbf9376131eb80608b758f38e7e7e
SHA256

43dbf888934e85e995972987e3a4ce20a5e2719008d1e19938b7457163e8ff53
SHA512

a47eaf8437056efd7e062fb9dbc54e37d0e96b342cbb5e75cc7d1da4a87969e08802972e925961722772102f4cafe2f12614459242d1f91d2a339366d60a6b60
SSDEEP

6144:Q8mUKL1jftHO7GJyv54/iCtl4efssmADkW+cPJr14X:Q8VK2WIu4eEjW+oJr12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b92fed7c4a15308a09f79c99455f51b_JaffaCakes118

Files

1b92fed7c4a15308a09f79c99455f51b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94b19a89a14c516fd531017c756b4031

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
GetCurrentThreadId
GetFileAttributesA
GetModuleHandleA
GetProcessHeap
GetThreadLocale
GetTickCount
GlobalAlloc
GlobalLock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
ResumeThread
SetEvent
Sleep
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
lstrcmpiA
lstrlenA

user32

CallWindowProcW
GetActiveWindow
GetSystemMetrics
IsIconic
PtInRect
SetWindowPlacement
TrackPopupMenuEx
UnregisterHotKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ