1850a1dcad67b47c6de40372d7a16660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1850a1dcad67b47c6de40372d7a16660_JaffaCakes118
Size

11KB
MD5

1850a1dcad67b47c6de40372d7a16660
SHA1

127e025e108dc6cb5e51cddbbdde8bc175a5dbbe
SHA256

eeb8ff13a05dfea97f8cff1b69fa0dd17fa1f848f5ab8a574eaccf276568e063
SHA512

e2e6b0126b1500305149b9880bff8df9aa7cd4e49c3e88fef3c3608371f5eec7e38b985d20e0b9c04ae1a181452d82e27e890fabaa36a0557309c314d3f7d606
SSDEEP

192:6eqWtJ/bdAzZ4QWVw3YqUaryXaTxL44ZF6WraKkCny6V2VE/ItO4ulHDyccmn:6e17BrQSwIqhyXalLDQ6aKkv6VqgZxyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1850a1dcad67b47c6de40372d7a16660_JaffaCakes118

Files

1850a1dcad67b47c6de40372d7a16660_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2dee53bcaa9597d35febfac41935ec9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_GetScrollRange
ImageList_Destroy
ImageList_Draw
ImageList_GetFlags
ImageList_LoadImageW

kernel32

ExitThread
CloseHandle
ExitProcess
ExitProcess
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE