d451da092784baa2cf5d6ce1b1c843e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d451da092784baa2cf5d6ce1b1c843e4_JaffaCakes118
Size

109KB
MD5

d451da092784baa2cf5d6ce1b1c843e4
SHA1

76bc6538027f98d5bdcfb55f7f045dc914727b74
SHA256

42acd6070d9f3ccf5c82d4fbc2989e7da62e8124f2eea32e661cc19944b805a9
SHA512

66bfb6ba1565bb137a99edb147d3d8c4a05e0bec80096abd94bdd2e2db9108f7d6f5b98ee581b4ae98712b88173f0558bed65a29a633f9bce7523b4119cbf44b
SSDEEP

1536:MGB3U1OmCW/VjDJhAZDz4xzIC3z72YeKELB5GT/Jy7VBI+lGCP7URDoq4OZZZLlG:lFWpJxzZED2/Jy7VewPgRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d451da092784baa2cf5d6ce1b1c843e4_JaffaCakes118

Files

d451da092784baa2cf5d6ce1b1c843e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d166ea51544eaf2e4ff9c2cad8b2023

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA

comctl32

DllGetVersion
ImageList_DragEnter
CreateMappedBitmap
DrawStatusText
DrawStatusTextW
ImageList_Destroy
ImageList_Copy

gdi32

CreateDIBitmap
CreateFontIndirectA

user32

DrawTextA
IsWindow
CopyIcon
GetCursor
GetDlgItem
DrawTextW
LoadMenuA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ