b1dab47a52d46ddee3131937bd57e0da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1dab47a52d46ddee3131937bd57e0da_JaffaCakes118
Size

100KB
MD5

b1dab47a52d46ddee3131937bd57e0da
SHA1

466d68f943d4433e1c19b41734844ff1a5e3c95c
SHA256

995d1a295110928ae0535b17d0a646802986cb030d9e43fe753fc0134a9a6bdb
SHA512

9658a3d8a6d1c03f296ece3be225ae7512f5126daac6a450330deb1e3271a23f8a8960c37be3947abf0f296e996f7cee75d83e2c8f20e92fa26117fd18eeba62
SSDEEP

1536:yipZ9YvmvuEVWsFXRAej9KbVcHbZXxpTWtGlsNwFZI9vr24fwdhWWxw/Z4Ro7:yi3MeVvFBjKh6NBpTWMxFZKrQBU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1dab47a52d46ddee3131937bd57e0da_JaffaCakes118

Files

b1dab47a52d46ddee3131937bd57e0da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55f397dc13e52c6c736be1516594ab86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
SetFilePointer
DeleteFileA
GetLastError
GetTickCount
GetCurrentProcess
CreateProcessA
GetModuleFileNameA
ReadFile

ole32

CoInitialize
OleCreate
CoUninitialize

user32

DispatchMessageA
CreateWindowExA
TranslateMessage
GetMessageA
GetSystemMetrics
ShowWindow
MessageBoxA
PostQuitMessage
DestroyWindow
SetWindowLongA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ