0cbe663e4cf3b0f6a1c63daff1b8e7c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cbe663e4cf3b0f6a1c63daff1b8e7c6_JaffaCakes118
Size

43KB
MD5

0cbe663e4cf3b0f6a1c63daff1b8e7c6
SHA1

68a1f116a91b0993123e8a0c40be1923d57a6544
SHA256

00aec13da3450437ea108ebf3fbdd729a7ec76fc80b01f40dbf45a03eae03946
SHA512

e7e66cb11cdedc98b5b2527bc3e3a3685c6bffa22d42103fce56010944a27eea6f1b0256d26ab6bc01da6ddfc8c9f1737434889675957335ae0b5ca484a913ee
SSDEEP

768:lCEjuuWLPZki2pORFVANgQf2QSL/l7hHAehjWyxYG:V8LhknpLoQ4cqYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbe663e4cf3b0f6a1c63daff1b8e7c6_JaffaCakes118

Files

0cbe663e4cf3b0f6a1c63daff1b8e7c6_JaffaCakes118
.exe windows:2 windows x86 arch:x86

b3b670ed91ddb74ad3fad50c62b29198

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetStartupInfoA
FatalAppExitA
GetCommandLineA
LocalFree
GetDateFormatA
GetShortPathNameA

user32

SetDlgItemTextA
GetClientRect
GetMenuItemRect
GetWindowLongW
EnableMenuItem
GetWindowRgn
GetClassInfoExA
GetClassInfoW
GetKeyState
GetWindowLongA
ReleaseDC
SetForegroundWindow
GetClassInfoExW
CreateWindowExW
CharUpperW

gdi32

CreateFontW
Ellipse
TextOutW
CreateEllipticRgn
CombineRgn
GetObjectW
BitBlt

advapi32

RegQueryValueA
RegQueryValueW
RegSaveKeyW

comdlg32

FindTextW
PageSetupDlgW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ