09d68696d07fffbeb657f9afe97ae00e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09d68696d07fffbeb657f9afe97ae00e_JaffaCakes118
Size

436KB
MD5

09d68696d07fffbeb657f9afe97ae00e
SHA1

74d3f6070a1f6fcb15a925b45cda183ac782e74a
SHA256

8ceb654c64eae8e84826af51094ffd754506ba9cfaa4fa9e50e57766aa879064
SHA512

96d438995b0a2f210ed7fa4b5acbeb922c0fa9ad8608ec9f7e331759cf561f3a9ee8886043eb705f4cf2e2cddc6f48fde0300931de810bc1c7f00e8a27892db5
SSDEEP

3072:9GFZppDfea3KJCzNTV0Zf74av9/e4J9oD2n1hgjb7Yi9KxlT1BTT:QFZppLe0KJCBTV2dexKhblT15T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09d68696d07fffbeb657f9afe97ae00e_JaffaCakes118

Files

09d68696d07fffbeb657f9afe97ae00e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

240890a13eaae031279b53a7c8064a56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA
PathAddExtensionA

kernel32

LoadLibraryA
VirtualProtect
CreateFileA
ExitProcess
GetProcAddress
VirtualFree
VirtualAlloc

user32

GetMessageA
GetForegroundWindow
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 428KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ