0c5f2a77fda84cb1a8df0c397166dd50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c5f2a77fda84cb1a8df0c397166dd50_JaffaCakes118
Size

131KB
MD5

0c5f2a77fda84cb1a8df0c397166dd50
SHA1

4f01dd6ca3d13b0588c17829b7767e702d1fa565
SHA256

952ae3265c8684ed1e312fd247890bd6a5ad99e6477b3d277bde0e0d6edfd5a7
SHA512

9f7aa5eb0021fd372965f3c07a196b524ddb4616a5e4dfa4971f523f89e91d320e1e7051160c5aa8e17ab67254aa990ad4492d7cc0ac4c2ce1c3b030dcc63d22
SSDEEP

3072:Xu/+LL2+z3CuKFm+8V/JaDRID+ClMswVuwFNXwgTZ:X3Lx7Cu6mhxURJCjwFNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5f2a77fda84cb1a8df0c397166dd50_JaffaCakes118

Files

0c5f2a77fda84cb1a8df0c397166dd50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01da600e6bc960ad5d2b354eb87b1803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
CloseClipboard
DefFrameProcA
GetCapture
DefMDIChildProcA
GetDesktopWindow
GetMenu
CreateIcon

gdi32

GetBkMode
GetDCOrgEx
CreateBitmap
GetDIBColorTable
GetBkColor
GetCurrentPositionEx
GetTextColor
RestoreDC
SetBkColor

comdlg32

GetSaveFileNameA
FindTextA

kernel32

GetVersion
GlobalDeleteAtom
GlobalAlloc
GetVersionExA
GlobalAddAtomA
VirtualAllocEx
ExitProcess
LoadLibraryA

Exports

Exports

rP33sI73FhX1q@20
DGeITnnv
_JJ5iI8E5cAO_0t
sDAK1Kq27vuK@8

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ