1bcd6d6e69cb534a46b0cbe4658b4107_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bcd6d6e69cb534a46b0cbe4658b4107_JaffaCakes118
Size

259KB
MD5

1bcd6d6e69cb534a46b0cbe4658b4107
SHA1

2d20cd2c087422be14d49dbcb7fb9dfb385471c4
SHA256

2457f4b6a8fdb02f8831608647674b032a19d3d88f3cb62951aa9a2c5b5af952
SHA512

cb1cbea4a3a3b41abda41e4f01a4408821b9c721a21e8a8eb851ee40f46a4475992e01dfa14767481b39bdf2259f0ba22e5de4959b17f80e735b3375c3181afb
SSDEEP

3072:Xr89g6tRIWp6NiP0F7s90lFDPMrE88khXiGsv7l0MGqMNCltBxJ3CQw:XrWHIWNcDlV0rskNiG0cqM4J3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bcd6d6e69cb534a46b0cbe4658b4107_JaffaCakes118

Files

1bcd6d6e69cb534a46b0cbe4658b4107_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88087a89f8de4a741d952a2f426d323c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
lstrlenA
GetCommandLineA
CopyFileA
DeleteFileW
lstrcmpiW
lstrcmpA
GetVersion
GetCurrentProcess
GetLastError
lstrlenW
RemoveDirectoryA
GetModuleHandleA
GlobalFindAtomW
SetCurrentDirectoryA
GetConsoleOutputCP
MulDiv
GetTickCount
VirtualAlloc
DeleteFileA

user32

GetDesktopWindow
GetMessagePos
GetInputState
CharNextA

gdi32

SetTextColor
SetWindowExtEx
GetStockObject
SetViewportOrgEx
GetPixel
SetColorSpace
SelectPalette
EndPath
GetDCOrgEx
UnrealizeObject
GetDeviceCaps
OffsetViewportOrgEx
SetBkColor
MoveToEx
ExcludeClipRect
SetMapMode
GetDIBColorTable
LineTo
EndDoc
SetBkMode

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ