dd0c7e58938a6f1913ff929a8c6295ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd0c7e58938a6f1913ff929a8c6295ba_JaffaCakes118
Size

975KB
MD5

dd0c7e58938a6f1913ff929a8c6295ba
SHA1

98d24b3325b33afa9b3244f3badd6a6abefd8a1c
SHA256

1985e6d2afe3a8c4104344ad56761dc9c4d9814f2e6249307f0468866e913332
SHA512

a36e7667bf88030db4ce1010d594a7145b472d13241d27d058f40ba9506c71c64f8e4fa842ba2026fc3e235920bdf0ddcc1372768a6356a8ecfb8a9ac780c386
SSDEEP

24576:z6Ejr9ZqAEtADLHbOQ/0MMJgEFh89jINTQEho7g0c5:z6wFDHO00ntv8itFGk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0c7e58938a6f1913ff929a8c6295ba_JaffaCakes118

Files

dd0c7e58938a6f1913ff929a8c6295ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

491720e079c42a3bdde625c6f1d1d6e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\temp\my.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
ExitProcess
GetModuleHandleA
lstrcatA
MultiByteToWideChar
lstrcmpiA
lstrlenA
GetTickCount

user32

SetMenu
wsprintfA
MessageBeep
GetDC
GetMenu

gdi32

SetDCBrushColor

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ