0b1d3eea10e6f728579810982f3b0fb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b1d3eea10e6f728579810982f3b0fb6_JaffaCakes118
Size

13KB
MD5

0b1d3eea10e6f728579810982f3b0fb6
SHA1

5c228fd10a967e443c913a0f3b0d14be5d2cc2b4
SHA256

e2c534190970f0919fdc7b733a4e57cd7f1870e945c6282996c6575a7d57cc48
SHA512

929af0794f99a128eaadc0226089e688c13c54683a0585108cdfe913f8a0a4cc4b7119e324d68958f2b79a5f3e0c52a99e606861f8290bbe6e9147ce98a8893e
SSDEEP

384:9qgkOBe+ckyRtcTvuTnhQknmb5RivRiam0:9eOaEvuNQ8+6iM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b1d3eea10e6f728579810982f3b0fb6_JaffaCakes118

Files

0b1d3eea10e6f728579810982f3b0fb6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2421a7ff3eef78bf62231a288e69e967

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Work\ZPack\Release\ZPackStub.pdb

Imports

kernel32

GetSystemDirectoryW
FindResourceW
RemoveDirectoryW
DeleteFileW
lstrcatA
GetModuleHandleW
GetProfileIntW

user32

EqualRect
SetWindowContextHelpId
ChildWindowFromPoint
GetMenuDefaultItem
GetParent
KillTimer
SetSystemCursor
GetWindow
AppendMenuW

gdi32

SetPolyFillMode

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.const
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ