1bc7450e6e06a5e3b4ab63ae2771c0a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc7450e6e06a5e3b4ab63ae2771c0a6_JaffaCakes118
Size

328KB
MD5

1bc7450e6e06a5e3b4ab63ae2771c0a6
SHA1

4722100bebb1f89b31589e7da15fc997622a0915
SHA256

67a8414c263ab0cea6bf7b0775fd379b9423c79adbcf63fb504bdd1aa38427f5
SHA512

be1d21452729c324a3b42ecea7dba6bb290232ce38bdeeced8c5277db97f02fe9312a8a6947757b3d8b51301f3de7d3e672426a394392fa5af5a5d07c2ec3b67
SSDEEP

6144:jAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4aO:M9Y5ioSsC5+BIK4Tg9EEigRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc7450e6e06a5e3b4ab63ae2771c0a6_JaffaCakes118

Files

1bc7450e6e06a5e3b4ab63ae2771c0a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb27bc700842989726d354165b1e20f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
UnmapViewOfFile
Sleep
CreateThread
GetCurrentDirectoryA
GetComputerNameA
PulseEvent
SetEvent
GetModuleHandleA
LocalUnlock
LocalFree
LoadLibraryW
GetConsoleTitleA
GetTickCount
lstrlenA
CreateFileA
GetSystemTime
CloseHandle
SetLastError
HeapCreate

user32

CheckRadioButton
DrawMenuBar
DispatchMessageA
GetDC
DrawEdge
CreateWindowExA
GetScrollBarInfo
GetKeyState
CallWindowProcA
IsWindow
FillRect
SetFocus
GetDlgItem

clbcatq

UpdateFromAppChange
DowngradeAPL
SetupOpen
CheckMemoryGates
SetSetupOpen

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ