0ed421f770da98c19ed6fc0e503734a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed421f770da98c19ed6fc0e503734a3_JaffaCakes118
Size

62KB
MD5

0ed421f770da98c19ed6fc0e503734a3
SHA1

6cf79ab01fdabef75504c9826086b28cecd3724c
SHA256

52fcf475eb4edf550bc8699b878abc744d8c359c738fa80415359531f17ac906
SHA512

f1b544fe911f72b581d3b131d112c9a5ff63b27dfef3a8ba1dcadad712aea79445930393e9cfef245c77cb54d4e91a7ce774096db86adf8af53486c904998326
SSDEEP

1536:hge2sVqeZWQE1fT5KYl9xvfmjkQzkeBgMxPAK:hwsVq31fT5F9x0kkVfxPV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed421f770da98c19ed6fc0e503734a3_JaffaCakes118

Files

0ed421f770da98c19ed6fc0e503734a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

639a67e2e72c734badb1a6ecb2cc57b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
CreatePopupMenu
CharUpperBuffA

kernel32

SetUnhandledExceptionFilter
GetFileAttributesA
GetEnvironmentStringsW
ExitProcess
GetCurrentThread
GetCurrentThreadId

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ