0e05f865194913e5b3b13cdd7b30f0e1_JaffaCakes118 | Triage

Sharing

General

Target

0e05f865194913e5b3b13cdd7b30f0e1_JaffaCakes118
Size

131KB
MD5

0e05f865194913e5b3b13cdd7b30f0e1
SHA1

31dadf6484e7bfd16dc2b0e7b64ea2d8c7ca4d80
SHA256

49815052572603f803965d3c0c4c5491683371023ba17e01a3e2b94e9c3ff468
SHA512

1c20686d10e533463578aa2fed4242b1d4a163fd415053238d67d11b29cdba99232e2d8889b813f3217311136f240db263790870e60927bd7a833f5dbf5e21e4
SSDEEP

1536:ihlU7oNVsiP05VqGpZ111rVjKqJx4XjydQCevlaoqem9PiuL/ku:N7oNVsq05ci1rV34jPCetNqeUPiuL/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e05f865194913e5b3b13cdd7b30f0e1_JaffaCakes118

Files

0e05f865194913e5b3b13cdd7b30f0e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1a6040249e6be28d3379b6241e51fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

waveedit

weInitDLL
weCheckForLostTempFiles
weOpenFile
weNewFile
weSetAutoClose
weShutdown

comctl32

ord17

user32

GetMessageA
TranslateMessage
DispatchMessageA

msvcr71

_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

kernel32

Sleep
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE