0eb9c0b3ee71d166c3f248e1e9722d6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb9c0b3ee71d166c3f248e1e9722d6d_JaffaCakes118
Size

11KB
MD5

0eb9c0b3ee71d166c3f248e1e9722d6d
SHA1

f41bf95803540cda37855478f15db3fc77d10e20
SHA256

35b99d1f0ca2e9dbb2fd449bb46413c1300b16e0fe55b7a8fb409f4d66a92798
SHA512

f83a9423599d36d7362995504c220e936f41715fb042a89866cf42a313ebb75ad880278709129bcd42fe635d922db8c09c5815450237a84b76390e51eeba9cfa
SSDEEP

96:jX3dsylpmTxNOPK7HCUdvnrPKm6bkZpLoRbpHFay5V27:fmTOP4Vpr/I2LoR9My

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb9c0b3ee71d166c3f248e1e9722d6d_JaffaCakes118

Files

0eb9c0b3ee71d166c3f248e1e9722d6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f042fc2925f6f2b4f0836fa6069e4b5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcatA
lstrcpyA
lstrlenA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

urlmon

IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE