05d35d7401e7f3dd3c22653ffd64b775_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05d35d7401e7f3dd3c22653ffd64b775_JaffaCakes118
Size

118KB
MD5

05d35d7401e7f3dd3c22653ffd64b775
SHA1

1f6dd17b67eb8775f1e3f2ff59755878d50b96c7
SHA256

d303c919645577ce1cdb41d71b9627c50ac9a2f4a0954834f609ce507e86cd45
SHA512

974df4cb437fa614d4d2919a9c03fab0b18b6309dbc918591d69809c48574216d24e5f7d02190146e217af417111667867c76ad4aad3282a9d0bce6dfe8201c9
SSDEEP

3072:Z1wSK0kBQ0lPVjnHmo7d1lwfV1NG6yHV885fOsP7t:ZmpzbjGS1lwfV1g6s75Bz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d35d7401e7f3dd3c22653ffd64b775_JaffaCakes118

Files

05d35d7401e7f3dd3c22653ffd64b775_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dece0ee22d68d025182e96ab8dbd84e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetProcAddress
EnumSystemLocalesA
LoadLibraryA
IsValidLocale

user32

wsprintfA
GetMenuItemRect
TranslateMessageEx
SetMenu
GetNextDlgTabItem

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ