0cd60fc4f7e3cebd4f9493a90f973286_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd60fc4f7e3cebd4f9493a90f973286_JaffaCakes118
Size

340KB
MD5

0cd60fc4f7e3cebd4f9493a90f973286
SHA1

0e1ab8737b16c0cea373c5c8c7586d5a77e98e43
SHA256

0736ff72017646c10f5ed0b62cdb881711a57a6a5592ca684913a5312109ef98
SHA512

a2f192b0f69f250f7d3dd2577ae7771bcc11610d52ab18ca1cda73126bc6b069881d41579e9842be79bb7e2bf1cc29fbfbb6971174533b2dbb3a8eebb0491be2
SSDEEP

6144:VRtIdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4Pyddg:i1tUM5aV/oLOVfhaa9ZpVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd60fc4f7e3cebd4f9493a90f973286_JaffaCakes118

Files

0cd60fc4f7e3cebd4f9493a90f973286_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f77d5428cf8342fcc234f0b53215b5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CloseHandle
MapViewOfFile
CreateEventA
GetACP
FreeEnvironmentStringsA
GetDriveTypeA
GetLastError
GetModuleHandleA
DeleteTimerQueue
LocalFree
GlobalLock
GetConsoleCP
LoadLibraryExA
IsBadReadPtr
CreateFileA
GlobalUnlock
HeapCreate
lstrlenA
GetStdHandle

user32

GetDlgItemTextA
GetParent
EndDialog
RedrawWindow
CreateWindowExA
GetDlgItem
DialogBoxParamA
CheckMenuItem
GetMessageA
IsMenu
GetSubMenu
ClipCursor
SetFocus
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpShowDialog
ApphelpCheckRunApp
SdbFindFirstTag
SdbCloseDatabase

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ