1bd755e5250119e5272b6c31a43aaa64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd755e5250119e5272b6c31a43aaa64_JaffaCakes118
Size

815KB
MD5

1bd755e5250119e5272b6c31a43aaa64
SHA1

e564d7a8ac01d6a203413146f3b01ba74ea97019
SHA256

e00f3c0e72bf15de54c7a9dcd1a33c29d9d0b7bd9b876962ef7ce9fa47ebc2d0
SHA512

192092cb42aaa91aae427192850692351f950810ca5b1ea6038326a270f4841e5293207c3d0d27ba2a72706150de15f98c895a802f973a051c2915b4626be925
SSDEEP

12288:g6UmQv9GcH3JV/+Bcl+H4rgdW9wjCe5MWbbo6cMThRA9ia/cYNXBgnPgCmDcCiS:JQ1GwJVWBEXgdWGkWbmEA9isc4X8IES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd755e5250119e5272b6c31a43aaa64_JaffaCakes118

Files

1bd755e5250119e5272b6c31a43aaa64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f16c057f4b21ef18c1d0afff049e3426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
CreateFileMappingA
CloseHandle
CreateFileA
GetACP
GlobalLock
lstrlenW
LocalUnlock
CreateEventA
GetStdHandle
GetPrivateProfileIntA
FreeEnvironmentStringsA
IsBadReadPtr
HeapCreate
GetLastError
LocalFree
IsDebuggerPresent
LoadLibraryExA
GetConsoleCP

user32

GetListBoxInfo
CheckMenuItem
GetMessageA
GetDC
IsWindow
DialogBoxParamA
RedrawWindow
SetFocus
GetDlgItemTextA
GetDlgItem
DispatchMessageA
GetIconInfo
EndDialog
DrawIconEx

uxtheme

EnableTheming
GetThemeColor
DrawThemeIcon
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ