bd625399c32c732c9b4ab25d51183df4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd625399c32c732c9b4ab25d51183df4_JaffaCakes118
Size

101KB
MD5

bd625399c32c732c9b4ab25d51183df4
SHA1

e9b38808b0a17d32f71189fbf852934cfd6b0c6c
SHA256

22f4c34da98dd9dbe00a914fa2673c887f0734164c3d13ef322e9d146d30a2ac
SHA512

d8a393ba96a75b5931b4b876979e085d23f1554b2266ccaf48ceee8c6a46d6fc463e07e3d15af67aecebfd49c4f07c1e0fc7a54527d36680e4760c4d8aee9d99
SSDEEP

1536:GUh34vSH5Fqr0tQgqWLpGQr/Oom7Kcrp7mcHVA/MURDoq4OZZZLlCIiba:akaTgPnOfX/i/NRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd625399c32c732c9b4ab25d51183df4_JaffaCakes118

Files

bd625399c32c732c9b4ab25d51183df4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a93b97b333cffd96f2415f101dd96c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_AddIcon
MenuHelp
DrawStatusText
CreateStatusWindow
ImageList_Copy
CreateStatusWindowW
CreateToolbar
ImageList_Draw

advapi32

RegOpenKeyA
RegCreateKeyW
RegEnumValueA
RegDeleteKeyA
RegEnumValueW
RegCreateKeyExW
RegDeleteValueA

gdi32

ExcludeClipRect
GetBitmapBits
CreateFontIndirectA
CreateCompatibleDC
GetBrushOrgEx
CreateCompatibleBitmap
GetPixel

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ