1b9bea8c3bee62060bcd2c7b658627b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b9bea8c3bee62060bcd2c7b658627b5_JaffaCakes118
Size

110KB
MD5

1b9bea8c3bee62060bcd2c7b658627b5
SHA1

3c95a3a294c394a2ce22f1e552a7a14a7fecfb46
SHA256

45ba00b1e0db5008f5724d955a46d67938a7b1cf86d7eba17e41ffe4c93d4779
SHA512

ec6eecc65413e61c1c42ec00f184f836ec1bac2660724525e53150aad42c999ba99db45ffdc9728c58598cf7f17ca19bea783f8bc8d16289a46567ad9e43c38c
SSDEEP

1536:+aPvN6Y8RwJCeCnQjeOw11YnV5YL+tjZrxvE1URDoq4OZZZLlCIib:+aPJCeCQjeJ1eV+CJZrx3RD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b9bea8c3bee62060bcd2c7b658627b5_JaffaCakes118

Files

1b9bea8c3bee62060bcd2c7b658627b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d213bc69f2c0debf258de2e9491318d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueW
RegCreateKeyExW
RegDeleteValueA
RegCreateKeyA

comctl32

MenuHelp
CreateToolbar
CreateStatusWindow
ImageList_GetIconSize
ImageList_Draw
ImageList_LoadImageW
CreateUpDownControl

gdi32

CreateBrushIndirect
SetTextColor
GetBitmapBits
GetBrushOrgEx

user32

GetDlgItem
CopyIcon
GetFocus
CloseWindow
DialogBoxParamW
GetWindowTextLengthA
LoadMenuA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ