08d11b4066b84050491b3f5cc771f48a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d11b4066b84050491b3f5cc771f48a_JaffaCakes118
Size

47KB
MD5

08d11b4066b84050491b3f5cc771f48a
SHA1

3de0d49074e2b6299cbf45335a185c52c800bd12
SHA256

f507100da77db73e6e823c459d9e7d6acc65b9bb04e66af86346ec470a03c310
SHA512

2a568a24c7d62cd296acbb3716829435835d444e4fb33355b2aa8bdc410485f2c0932347a649e0fc4601e214dc0e24f9e14841a6f8aeaa49f56f76c7931ef368
SSDEEP

768:ZK4jpX3GHDQvgeasXOHuK18pk81JOYGL4vr1Gpr48Rs:4kBODQvRasuJSk86YRr1GDRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d11b4066b84050491b3f5cc771f48a_JaffaCakes118

Files

08d11b4066b84050491b3f5cc771f48a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8a54117306b947b6e0397b323d875e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindFirstFileW
GetCurrentThread
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetSystemDirectoryW
GetVersion
GlobalAlloc
IsDebuggerPresent
LoadLibraryA
MapViewOfFile
Sleep
SystemTimeToFileTime
VirtualAlloc
VirtualFree

user32

GetClientRect
GetKeyState
GetSystemMetrics
InvalidateRect
IsIconic
LoadCursorA
ReleaseDC
SetWindowPos
ShowWindow

gdi32

PlayEnhMetaFile
Rectangle
SetROP2

shell32

DragQueryFileW
SHBrowseForFolderA
SHGetFileInfoA
SHGetFolderPathA
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteA
Shell_NotifyIconW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ