00ad8d9346f1b79f343a30822846d228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00ad8d9346f1b79f343a30822846d228_JaffaCakes118
Size

11KB
MD5

00ad8d9346f1b79f343a30822846d228
SHA1

899c56a471aab09ba52c96db86fc21712270c60c
SHA256

534c6e27efdc530ca3c3c0aa85318b1c15ed0c6a86c11ecaf254416f3049cda5
SHA512

b2c6027461a4ea5ec4d865c3ee4aefd6c139a458378aea741b1683499e5c41bed9544d812410c21bb00ddda7b08a8b323ed63f36d02d89643e893dfd1a340102
SSDEEP

192:vHdlCMza6xOpDCHTGTRofqAj9TT3K2yIj/tNsCtds5U3Zw9g9z9kMTkswxVa:FlzeQ6TR3M33Kmj/+5KB9z9bKba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ad8d9346f1b79f343a30822846d228_JaffaCakes118

Files

00ad8d9346f1b79f343a30822846d228_JaffaCakes118
.exe windows:1 windows x86 arch:x86

38ab451f438445e7386b305f93bb4f55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p___argc
__p___argv
__p__osver
__p__pgmptr
__p__winminor
__setlc_active

shell32

DragQueryFile
Control_RunDLL
DllCanUnloadNow
OpenAs_RunDLLW

kernel32

BuildCommDCBA
CancelWaitableTimer
CreateMailslotA
DisconnectNamedPipe

comdlg32

FindTextW
dwOKSubclass
PageSetupDlgA
GetOpenFileNameW
ChooseFontA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE