0ddd7b87e2b0ce9a2ec3be0c8bb38fbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ddd7b87e2b0ce9a2ec3be0c8bb38fbd_JaffaCakes118
Size

49KB
MD5

0ddd7b87e2b0ce9a2ec3be0c8bb38fbd
SHA1

0246cf1e6e744ae38d81fe5f26d94ee43f2a1f76
SHA256

b113110ccaadd40b64171b6678b18cfe78332c9361813787c5e152b383c78e5c
SHA512

a614ccc44e4a9d3ee347b49a694b1c22ca743a0aaf0c580019bc312a1a824e9f9a9e172c096f68252f6ea5ac16535e56a3d6c6a1f929ee429a74e28c748edc65
SSDEEP

768:Mg0jQ0IcC1Cwjb7kFNhFkNDIzWAVQROOOUQzifoxwVCOKXIKXRp6Wse3:UQdbPcSC6OX+fLVCOKFzh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ddd7b87e2b0ce9a2ec3be0c8bb38fbd_JaffaCakes118

Files

0ddd7b87e2b0ce9a2ec3be0c8bb38fbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

75ca850df0cf68b22dae0a0c989a4aed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateFileMappingA
GetProcAddress
HeapAlloc
GetProcessHeap
GetModuleHandleA
CreateFileA
VirtualAlloc
GetCommandLineA

user32

ShowWindow
LoadIconA
DialogBoxParamA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ