0db4c08cc6ed8ce23af44f58472858a4_JaffaCakes118 | Triage

Sharing

General

Target

0db4c08cc6ed8ce23af44f58472858a4_JaffaCakes118
Size

204KB
MD5

0db4c08cc6ed8ce23af44f58472858a4
SHA1

3409eacceaaf12eaab79f94c24a561adf5f78776
SHA256

061ffed1e635de35c0580d64a0aeb47110801444c4697e20f1507339b70e1852
SHA512

2b57c2dfd513a165857fac1fa5343d5b946d92c556a218377d2483d4294d83fa3697739443451a55f935c28bc3c7b4b50438d18049f49a6af203623b0f8b7415
SSDEEP

3072:QiStBi5QVpsdR3QzT2m4b4rCAlmx9Cv/9OcpbYH6vk++fRKRMGFj:QigBi5SEMp4bhDxMlYGkj3GN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db4c08cc6ed8ce23af44f58472858a4_JaffaCakes118

Files

0db4c08cc6ed8ce23af44f58472858a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5802faab5c13ffa42da2b9ce9a4ae438

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GetTickCount
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
LockResource
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
SizeofResource

comctl32

InitCommonControls

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE