6131aafe744d20a26958613f0384a833_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6131aafe744d20a26958613f0384a833_JaffaCakes118
Size

186KB
MD5

6131aafe744d20a26958613f0384a833
SHA1

1cfc5487014af6cd3af3e4348152c7222eca703d
SHA256

fb52b32ce0bfb50275aaf2504cd57cd8455e02fb601c5b182449b6ddde9938c4
SHA512

ec903b021a5699e72c777549500efdb16669a87cf88715ae1242b3d5417d53e73b664bfe5724ac59c4355178139716f27e553fdd85e0aea035c1ddd33fcbbdc8
SSDEEP

3072:6jPv/DkANHKvFBBHYn45zPJxAMUXWF/JSWygwqUWh5COiF242vNbKGECv:6j3YAovFBBHE4VJ+wF/JSWywUWrKF23c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6131aafe744d20a26958613f0384a833_JaffaCakes118

Files

6131aafe744d20a26958613f0384a833_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b58e5cbcaeab41a0ca09a54db93154f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRectEx
SetCursor
SetRectEmpty
InvalidateRect
PostMessageW
GetWindowPlacement
GetClientRect
FillRect

advapi32

RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW

kernel32

CreateFileW
GetShortPathNameA
GetProcAddress
GetFileInformationByHandle
GetCurrentProcessId
UnhandledExceptionFilter
EnumResourceTypesW
CloseHandle
GetModuleHandleW
ExitProcess
LoadLibraryW
GetCurrentThreadId
GlobalFree
GetLastError
GetVersionExW

msvfw32

ICOpen
ICClose
ICSendMessage
ICDecompress

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ