0073f9fbdc78e805124cf6c74c8b9fb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0073f9fbdc78e805124cf6c74c8b9fb5_JaffaCakes118
Size

24KB
MD5

0073f9fbdc78e805124cf6c74c8b9fb5
SHA1

494ac497c410fa0180cdee12406cc26a8cf09250
SHA256

85d1c1dc7a06fa3bb44141b1b874b368051a4e179f58c69dbd2e9dce61971e50
SHA512

17e8a5633a6ab4577b0221a9dfa2584c0d6b35564087857f5b3a744509fc0433a1956d6d3f373898c420428027d4882c0d2108ba925564604e46f875ac69cf7a
SSDEEP

192:garHbhJ3fCL+lNP1oyNj5JT5RAO2Bmjb+F:57jfCL01P5FTAOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0073f9fbdc78e805124cf6c74c8b9fb5_JaffaCakes118

Files

0073f9fbdc78e805124cf6c74c8b9fb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9887079aeb70113cdf553ca18c1b6e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
CloseHandle
LoadLibraryA
CreateMutexA
GetStartupInfoA
GetModuleHandleA
GetLastError
GetModuleFileNameA

user32

PostQuitMessage
EndDialog
SetTimer
TranslateMessage
DispatchMessageA
GetMessageA
ShowWindow
CreateDialogParamA
GetDesktopWindow

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_snprintf

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ