0b06f226b708348781bd6d4f29746cb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b06f226b708348781bd6d4f29746cb3_JaffaCakes118
Size

815KB
MD5

0b06f226b708348781bd6d4f29746cb3
SHA1

542323198682b9a2d894b0e259f45020279415f7
SHA256

18c04edc889f7f7ec9b07affad915bdb26c5901f6d62fbe016fc462051cc082f
SHA512

cc357d0d8c5735b2b96b4f8f1c0a673249f4f0baaf1e598eeb5d2e1923eb3f2885a0985204b6724458d8f230a69f89456d29fd7228719553455a534504960f82
SSDEEP

12288:7gsbGNUo1c5ROtsSh/6m+JQejZ6ew809Wi7+H+qOo8bDJtHB+8GPzl4QSNY42ekS:7pice0m+J9FZTA+HZO5JVB0PpSKKd1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b06f226b708348781bd6d4f29746cb3_JaffaCakes118

Files

0b06f226b708348781bd6d4f29746cb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65f5ba2a15a63df1d9bf5e5b91f05fa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
FreeEnvironmentStringsA
GetLastError
FindClose
LocalFree
GlobalUnlock
FindAtomA
CreateFileA
TlsGetValue
HeapDestroy
SetupComm
CreateMutexA
MapViewOfFile
GetModuleHandleA
HeapCreate
LoadLibraryExW
UnmapViewOfFile
GetACP
lstrlenA
ExitProcess

user32

CheckRadioButton
GetFocus
DispatchMessageA
CopyRect
DefWindowProcW
DrawMenuBar
DrawEdge
IsWindow
GetIconInfo
GetDC
FillRect
CallWindowProcA
GetDlgItem
MessageBoxA

uxtheme

GetThemeRect
DrawThemeEdge
GetThemeSysInt
DrawThemeText
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ