0bf989e91f258add5b1818b96147f665_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf989e91f258add5b1818b96147f665_JaffaCakes118
Size

121KB
MD5

0bf989e91f258add5b1818b96147f665
SHA1

9f495da9ae3547ee7de6af3f2508a80c061b21da
SHA256

d9dd18fa91cfa8a03f9fcb66137a8389510180f4b694a6b895250694da223ed8
SHA512

dd371a5c85da1f0f583718daa64afeb11803f49fcee5e36b869b7b2df23c3206b2d7ac670ff9db40801e2adbc468efea26f827b5d317d406d20491e18635e202
SSDEEP

3072:/2xJbRKToYSqXbxZBuIiGWm9hxCf49AGvhUq0+W:ODbQcnqXFum94Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf989e91f258add5b1818b96147f665_JaffaCakes118

Files

0bf989e91f258add5b1818b96147f665_JaffaCakes118
.exe windows:5 windows x86 arch:x86

030af6d58dbb2de2f4325ad99d9fc4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
DialogBoxParamA
SetWindowTextA
IsCharAlphaA
SetWindowTextW
EnumChildWindows
SetDlgItemTextW
GetActiveWindow

ole32

CoRevokeClassObject

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

InitializeCriticalSection
LoadResource
SetFileAttributesA
LocalAlloc
GetTickCount
HeapDestroy
GetStartupInfoA
FindResourceA
ExitProcess
DeleteCriticalSection
GetProcAddress
FreeLibrary
LoadLibraryA
IsBadReadPtr
LocalFree
GetNumberOfConsoleMouseButtons
GetDateFormatA
HeapCreate

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ