0766b804a6a58d3d584dcb081f45a8c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0766b804a6a58d3d584dcb081f45a8c6_JaffaCakes118
Size

232KB
MD5

0766b804a6a58d3d584dcb081f45a8c6
SHA1

5048eb23cdf547054aa261eb5cb2aed030f7b4c8
SHA256

447fb87415f51c73020a8c0c23c09621c2e8c75d3b17d4b1510b548e7cf717ef
SHA512

b2f5b7c7feaf7ccde0d836b056bccbd42e7d632b3eebe36529af315a26ddf4ee5556d7a6015ab87ceb173eb422e62e395b288eeb7e0a24966f3ceaaee29e0cf0
SSDEEP

3072:9eDx5Qp2an4czBnIatQKrt18tqezpYq7z9sANvrtLyj+ll:ojSf4c9nIaSq18tqeWY99rta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0766b804a6a58d3d584dcb081f45a8c6_JaffaCakes118

Files

0766b804a6a58d3d584dcb081f45a8c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2241a245e42b14da3bcf904e6fec9976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDlgButtonChecked
GetWindow
CharNextA
GetDC
GetMenu
CharLowerBuffA
CharLowerA

kernel32

WriteFile
VirtualQuery
GetCommandLineA
LoadLibraryA
WideCharToMultiByte
VirtualAlloc

Exports

Exports

_Y2o

Sections

CODE
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sjdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.esdata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ