0db99db049cc72c20170e6c76932e1d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0db99db049cc72c20170e6c76932e1d5_JaffaCakes118
Size

121KB
MD5

0db99db049cc72c20170e6c76932e1d5
SHA1

9212a970c2dbb6dea562245050582479759c9401
SHA256

0846aaf257977b79b8761344fae31624673ec582976a285ffc9054a513bab907
SHA512

5fefe9deec97215f18a747ea1ba528d762da31a670d8523c664d1674e0f0f61fea30e9e6bf2cfff74ad56b0786b4d180b35044c30493023ecf512b08f109c864
SSDEEP

3072:Qe6Zp1nNj+AKmzpwKZB6vFLkxjtdXVB1nf6wDl9Kg2:6pDaAKAmRFQj7B9Kn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db99db049cc72c20170e6c76932e1d5_JaffaCakes118

Files

0db99db049cc72c20170e6c76932e1d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e3cd20844dbac57c60bde765604fa32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LocalFree
GetTickCount
LoadLibraryA
LocalAlloc
GetVersion
GetSystemInfo
GetModuleHandleA
CompareStringA
GetVersionExA
GetFileType
CloseHandle

user32

CharNextA
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ