0dba496df6b43f9aee1fdd306d1c3679_JaffaCakes118 | Triage

Sharing

General

Target

0dba496df6b43f9aee1fdd306d1c3679_JaffaCakes118
Size

43KB
MD5

0dba496df6b43f9aee1fdd306d1c3679
SHA1

a44df290780279817d65fcc1db6a8047bb655992
SHA256

6a42ff86645fcf7cdb5c3b95c8c6d300a5a6ec5d5ed58c317bc4fe28754fcd99
SHA512

022d21f8b4cd121e89bd25d247a56abe41c38e0ac5bfcda2f66d5313b5c0b9bf754266b03f74ca58ed12dd23146a4dd7345b4fd1a25c4aa9a146a1d5956b3b57
SSDEEP

768:jwxZlTg9C5Q4e1RyVTIDpIY+QJOpcqYLxqygsJIgE5s8vsOxp91bjVKWceTE1Drv:jwx6C5Q4iRyNI2eRNLMZsJIgAvsSr1b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dba496df6b43f9aee1fdd306d1c3679_JaffaCakes118

Files

0dba496df6b43f9aee1fdd306d1c3679_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ff00cc542cad1122d246a2a7ac17ad5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetCommandLineA
HeapAlloc
GetProcessHeap
VirtualAlloc
GetModuleHandleA
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
LoadLibraryA
CreateFileMappingA
GetProcAddress
CreateFileA

user32

LoadIconA
LoadCursorA
DialogBoxParamA

advapi32

RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ