1bdffa74613b5bb887160e63db481d86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bdffa74613b5bb887160e63db481d86_JaffaCakes118
Size

175KB
MD5

1bdffa74613b5bb887160e63db481d86
SHA1

bf48c83ea9f513cb9f88c0008289718dfca7143a
SHA256

bd6b1a652eed1f70792ab291b2500c0b4259cee3952c57075907d19ce50e36b1
SHA512

f0d45a16a75436fb471addc8030551ab86d6bcb0a60f8b480cde065387fb61ca7850a244f4a386506217273a9e2ceee8c516c1918b8efdd6f40c3099df153e1f
SSDEEP

3072:GbVAQh5jfVIuGqlnD1Ge5j2v66gTHe/dfsMzOM7cL6P3jrCCdND9:sqQD69GnD1G4jeaTIqMG6P3Ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bdffa74613b5bb887160e63db481d86_JaffaCakes118

Files

1bdffa74613b5bb887160e63db481d86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c3da71c92fcef12a38e2c8967be85f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
UnmapViewOfFile
MapViewOfFile
GetModuleFileNameW
EnumResourceNamesW
SetFileShortNameW
FindResourceExA
FindFirstFileA
DuplicateHandle
FindClose

winmm

timeEndPeriod

user32

DestroyMenu
TrackPopupMenuEx
ClipCursor
RedrawWindow
CreatePopupMenu
FindWindowA
GetDesktopWindow

rpcrt4

NdrComplexArrayFree
UuidCreate

shell32

Shell_NotifyIconA

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ