0d43805d3ecb39fe26cee56506f62c0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d43805d3ecb39fe26cee56506f62c0b_JaffaCakes118
Size

50KB
MD5

0d43805d3ecb39fe26cee56506f62c0b
SHA1

d3993f9ba5a7fb36fdf717bfd4d2186ffc237e8f
SHA256

ad7b410c233f32bfd093da7d49aee5b9f68265a91801cc4a1d4192e3c0207f85
SHA512

71ceccfcc1f2ed9de376810954ee4c17b10d52763dc47e6af9ad0cd1d1f9beab0c292b71a8bc1409ea63a3dc5606717a67fc56134122719652806c9185b33042
SSDEEP

1536:lQlbvtgwsMBXKVmU/9eTg1v4FhX3SraiWzIsTZ:lmblgfqXKV+Te2hX36aiMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d43805d3ecb39fe26cee56506f62c0b_JaffaCakes118

Files

0d43805d3ecb39fe26cee56506f62c0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5120cb31cacd54c5722773d57c54d3be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogW
CompareFileTime
CreateWaitableTimerW
ExitProcess
GetCompressedFileSizeA
GetModuleFileNameA
GetNamedPipeInfo
ReadConsoleInputW
RtlZeroMemory
SearchPathA
SetHandleCount
SetMailslotInfo
SetWaitableTimer

shell32

DllCanUnloadNow
ExtractAssociatedIconW
SHGetDataFromIDListA
SHGetSpecialFolderPathA
SheRemoveQuotesW
Shell_NotifyIconW

gdi32

AnimatePalette
ArcTo
GetArcDirection
GetCharWidth32A
GetFontData
GetICMProfileW
GetLayout
GetWindowExtEx
PatBlt
RemoveFontResourceW
ScaleViewportExtEx
SetBitmapDimensionEx
SetBrushOrgEx
SetDIBits
SetMetaRgn

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE