0b0c3905260c6863c0bb988e35b2724b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b0c3905260c6863c0bb988e35b2724b_JaffaCakes118
Size

125KB
MD5

0b0c3905260c6863c0bb988e35b2724b
SHA1

6b4109755223f7e86c468e639a10dd17c5c695a1
SHA256

e002124301f874c9f775302550fb89e44beda0ac8b6b2765fc5ff2177566b9ac
SHA512

2c9f44130a39c3cfc8b3f5d5ef217e9a6b83a80bd9dec7095d7cdb6309fd746db640cda01e8af5866e642fe794c89f0d25d766bdc5334ccd26153ec5b4b93f77
SSDEEP

3072:QNIxEeDIA54koCu3MHA1/Z1ZzsGseQbBlb91KiN62dX1pWFs/BTT/uG:7xVIDoFAtZ5seQbf7BNhFoFsxTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0c3905260c6863c0bb988e35b2724b_JaffaCakes118

Files

0b0c3905260c6863c0bb988e35b2724b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf62525c9ddec519bfdf386499f37c94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
CreateFontIndirectA
GetClipBox

kernel32

VirtualAllocEx
LoadLibraryA
SetThreadLocale
ExitProcess
IsBadReadPtr
SetLastError
SizeofResource

comdlg32

GetSaveFileNameA
GetFileTitleA
FindTextA
GetOpenFileNameA
ChooseColorA

user32

GetCursorPos
GetClipboardData
GetMenu
DrawMenuBar
GetClassNameA
LoadCursorA
IsWindow
GetClientRect
IsMenu
GetCursor
IsCharLowerA

ole32

OleRun
CoRegisterClassObject
CoUninitialize
CoFreeUnusedLibraries
MkParseDisplayName
StringFromIID
WriteClassStm

Exports

Exports

_wL9itTB
ACqg1V0QzAqzO
srWQXycDR
oW27sUTV@20

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ