09ee20bf1af772f7e71adbb98a419687_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09ee20bf1af772f7e71adbb98a419687_JaffaCakes118
Size

116KB
MD5

09ee20bf1af772f7e71adbb98a419687
SHA1

fe1b0e3d22322b51290e8868be92aaa725ae0fb8
SHA256

a6e5fde76cdd768eba77c8c5260d46863add4b447c206dc95c269e3516cacc18
SHA512

b420f622279f9ab4a8aa488764f25274544e2e933055711f77e7bd62c9158a24e3d7ff3a0cc4e5a825226eb2578fc02ac032c95365a03e50a1eb863a88185677
SSDEEP

1536:O9De2xHYcO0NnTZzlcZ7peThSiCqELMMpR:ONe2x4cO0NTZzlcZ7kQgEIMp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ee20bf1af772f7e71adbb98a419687_JaffaCakes118

Files

09ee20bf1af772f7e71adbb98a419687_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c4e1c16c172c337d2629eb439489af4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
CreateFontA

kernel32

GetTickCount
GetModuleHandleA
ExitProcess

user32

wsprintfA
DialogBoxParamA
EndDialog
GetDlgItem
LoadIconA
SendMessageA
SetDlgItemTextA
SetFocus

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RZR1911
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE