1bde02f1a6230cc2bfcfe99d178b2b9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bde02f1a6230cc2bfcfe99d178b2b9f_JaffaCakes118
Size

486KB
MD5

1bde02f1a6230cc2bfcfe99d178b2b9f
SHA1

87a0bbbb2ae3c2146ad6570cbf3351b7862f7c28
SHA256

95485e5bf80ce569fd3fe23c451bcab2154bced2bfbdeccbe261ca71ae3d6e5c
SHA512

a826799fda81a14adaa1016c35fc25a9394f28b6f350bb764a60d4e569848e9cb243bb1815e681ba198762dea1c2b1485c1bed5eea331bd83551a6e3566a854a
SSDEEP

12288:xP+gOJSB9Ll5/c92N+mnMrE8nVBmmyfO:B+9JMLl522gE8nrmm5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bde02f1a6230cc2bfcfe99d178b2b9f_JaffaCakes118

Files

1bde02f1a6230cc2bfcfe99d178b2b9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 611KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ