0f3d245d85fea0a6ad98bb0c1977076d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f3d245d85fea0a6ad98bb0c1977076d_JaffaCakes118
Size

19KB
MD5

0f3d245d85fea0a6ad98bb0c1977076d
SHA1

de9d678a4dae9a824e79eac7af068580dbdbd116
SHA256

0f14d4e626bc10bcf9fcd3deaa1a3efb61a4e1db69bf2ff3f1586bf2721997de
SHA512

d8f22d168a794a5e75f53a30ddc4d79dbabffac23851eb4c93c832df300826858b591d56ee2e8f5961252576c49dedf27920faab68e6b89534126f0649aaa456
SSDEEP

384:3b+dqoWRx1yYvGb+0hwYgbwOXGhMthMElOZSp+otqNImZ:6ux1PvvYFuGWthMElOZS3tmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3d245d85fea0a6ad98bb0c1977076d_JaffaCakes118

Files

0f3d245d85fea0a6ad98bb0c1977076d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7f03b9e53cf0df0ad3f3bd28ea4916f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetFileType
UnhandledExceptionFilter
GetLastError
GetEnvironmentVariableA
SetFilePointer
CompareStringA
WriteFile
FlushFileBuffers
GetStdHandle
IsDebuggerPresent
Sleep
InterlockedDecrement
ReadFile
SetEndOfFile
GetCurrentDirectoryA
CloseHandle
CreateFileA
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
SetEnvironmentVariableA
lstrcpyA
ExitProcess
LocalFree
FormatMessageA
VirtualAlloc
GetModuleHandleA
GetCurrentProcess
TerminateProcess

user32

GetDlgItem
MessageBoxA
wsprintfA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ