0dd2acb9cd871028fa08e1aa3749c256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd2acb9cd871028fa08e1aa3749c256_JaffaCakes118
Size

81KB
MD5

0dd2acb9cd871028fa08e1aa3749c256
SHA1

f84cff6e11f653db82a1cc2719c53701d6651fe5
SHA256

db0fc32cddf89c7dc6bf5dced91fa725b54d3b85f2947c9a7ff7af3e5d6adc91
SHA512

7d61fc6825dcd8ac939d8ea80a810e5e0df70a43adf58a40157fdb1309b9f5d244ad2624f2574e6ab2ce5b515546d0998b37cf94ae45706dd8809e12953e6c85
SSDEEP

1536:trnpNxkRMeCV4Oxe3If6/UnBmURUygHvpyxjGlP6Q0:ZnHiMPdaIf1nBmMgHxQFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd2acb9cd871028fa08e1aa3749c256_JaffaCakes118

Files

0dd2acb9cd871028fa08e1aa3749c256_JaffaCakes118
.exe windows:4 windows x86 arch:x86

293a087e69e907612738d4995bb51c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE