0b9d8dca162256ce5285a160fd0c264b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9d8dca162256ce5285a160fd0c264b_JaffaCakes118
Size

26KB
MD5

0b9d8dca162256ce5285a160fd0c264b
SHA1

cce531a6183b13d4b46fc95924454c4c49316e35
SHA256

dc38798371834ebf8685dfac7813668d46921de53820df2cf86781a5d47bbc42
SHA512

98a905a0079c92df4000bef82ddcd58bb8e28bc726ce81dd22ae6322d9a3a50adb71859c8668e01cda4f5fba0bb6cb7b493034c304131a8c101253f01c17fa1d
SSDEEP

384:Q7OyK68F5N5o8CH2uD0G9AC1eD+MWchWXqrTvr+ZueMuDp1KuvnCv:wQ9o8CHWAAC1eukrmMujfCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9d8dca162256ce5285a160fd0c264b_JaffaCakes118

Files

0b9d8dca162256ce5285a160fd0c264b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b6eb2c17ac10761bfc63cd3f341f06e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GetOEMCP
EnumCalendarInfoW
BackupWrite
GetDllDirectoryA
OpenThread
GetProcessShutdownParameters
GetConsoleAliasesLengthA
IsValidCodePage
SetThreadExecutionState

user32

MessageBoxIndirectA
WaitMessage
MapVirtualKeyA
DdeClientTransaction
OpenDesktopA
GetAltTabInfoW
DdeReconnect
CharPrevW
GetTabbedTextExtentA
TrackPopupMenu
GetMessagePos

Sections

.text
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ