08fb38c9dc99bcb6888f3acfbd1be5b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08fb38c9dc99bcb6888f3acfbd1be5b6_JaffaCakes118
Size

144KB
MD5

08fb38c9dc99bcb6888f3acfbd1be5b6
SHA1

000b6e380da40d7872f75b7ed322a1aad5148ae8
SHA256

d1a0cb43d62576f59db53393cf9dae8455a80be405c49c34bf93f410ca96ac45
SHA512

729263d4baa1d6c335245191117a483968208debd15852b6c73da3ec7e289ac07185759b3a7f05ea36da6bd45d8ef97649dfb257955922c08b091d0b5e5f98b8
SSDEEP

3072:+GA+hXUjh/We53pJB07vTcU3WbowmbzQpL7hsy:+ehXyO85JSrq8bz+LCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fb38c9dc99bcb6888f3acfbd1be5b6_JaffaCakes118

Files

08fb38c9dc99bcb6888f3acfbd1be5b6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c08515c204868bb533afe45bec201100

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

msvcrt

memcpy
_except_handler3
_exit
_XcptFilter
_adjust_fdiv
exit
wcscmp
__setusermatherr
__getmainargs
__p__fmode
_putw
_controlfp
__set_app_type
_acmdln
_initterm
__p__commode

user32

DestroyWindow
CheckDlgButton

gdi32

SelectObject

kernel32

HeapCreate
HeapAlloc
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ