0d8b0b772d45fff91208c3eebeb62820_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d8b0b772d45fff91208c3eebeb62820_JaffaCakes118
Size

109KB
MD5

0d8b0b772d45fff91208c3eebeb62820
SHA1

6559f51be0304bc4dd962d0c09bb72fbb3986b49
SHA256

3b148ec71237922d8100bd8b481088d984e564b96d4e3212554097fabcbc4175
SHA512

5b6011b16c80a70b1763d21638c3dc7d9bac448d6f808e175d48524aab6a988890d62cd4cb2dc00d71a05ceeb9e0e4df0a995f4a7b3c5539915333c574ae49db
SSDEEP

3072:MPC9YR7mIBMeqxObC0PKuUYfztR0+J80Mlf:PYR7KWbzwYfztxqBlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d8b0b772d45fff91208c3eebeb62820_JaffaCakes118

Files

0d8b0b772d45fff91208c3eebeb62820_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1a9d3901e788d51c80edb5509daa6d20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetStdHandle
GetVersionExA
CreateEventA
CreateMutexA
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

user32

LoadIconA
GetWindowDC
ReleaseDC
LoadCursorA
SetWindowTextA
LoadCursorFromFileA

shell32

SHSetLocalizedName

msi

ord212

msvcrt

_wcmdln
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_exit
_XcptFilter
exit
_initterm
__wgetmainargs
_onexit

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ