0fd67809060ee5f6d4096ebbbe60bf15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd67809060ee5f6d4096ebbbe60bf15_JaffaCakes118
Size

119KB
MD5

0fd67809060ee5f6d4096ebbbe60bf15
SHA1

7276500ccc55afae2341d986d33e3de278b11abb
SHA256

e3e8d1907a140b295bd03f09251b59fd7fe31f57441363dc008b171d95e324be
SHA512

27b5a4438acbb8fd9793c503f606efd94abf51a99f61bfc04fd33228399467622719e71c89923b976daaac729533635ea3972865e5ca3ee6a3a83c22d5914770
SSDEEP

3072:YRgJcu3en7txKjB9ep1zyljg1Slr6+Oj+HWn:Weunxg7e1Gljg1Sh6+PHW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd67809060ee5f6d4096ebbbe60bf15_JaffaCakes118

Files

0fd67809060ee5f6d4096ebbbe60bf15_JaffaCakes118
.exe windows:1 windows x86 arch:x86

48f7216e753a6d7c75e38c3c8f7d1abc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetCommandLineA
GetCurrentThread
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
Sleep
SleepEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ