dd51dbf060086fb575255c08823719dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd51dbf060086fb575255c08823719dd_JaffaCakes118
Size

30KB
MD5

dd51dbf060086fb575255c08823719dd
SHA1

8b057e7bf324b29e3a7f75a3c205c779901032c7
SHA256

37402dc7b93ad762bd882842244f210bacf01f3b9a52cf0591dcb8c69099cbaf
SHA512

d9811d3fa01a1f2d4302c59f942535b440c190671d981d0866bd026a0d0feb6482bcf29660bfbd9718cef39e6bf8f882fa25a99845f3143ec3a1928fb17e7a11
SSDEEP

768:CYBilnbcuyD7UwauzV6UA9zo+A50vneeYc:l+nouy8NWVzA9zoV5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd51dbf060086fb575255c08823719dd_JaffaCakes118

Files

dd51dbf060086fb575255c08823719dd_JaffaCakes118
.exe windows:1 windows x86 arch:x86

027b064d3d0105dd4236ed3b101b8fa4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
ExitProcess
FindClose
GetCommandLineW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
LoadLibraryA
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetSystemInfo
VirtualProtect

ole32

CoInitialize
CoUninitialize

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear

user32

MessageBoxA
MessageBoxW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ