0b4801f3a4e1dc1bfe986aaccbab66bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b4801f3a4e1dc1bfe986aaccbab66bf_JaffaCakes118
Size

115KB
MD5

0b4801f3a4e1dc1bfe986aaccbab66bf
SHA1

1e78c2407922f15440d21ca799c822467aa94db7
SHA256

dcec5bae7426b6c9555748bf11a1ba43000154c4f70e9d3f6d6fffa9af651203
SHA512

33c635e58242fdfc13a73dce30fbf53d50c9dfbd005c49bb293d0e59e5ec680a48ce7a59394b2d2730d9e9d3ed00b974059badb49ffcfab034c170f06a219533
SSDEEP

3072:tlY273d/bP+1YY5aEFwxobdj4/A82i/mRb3HVbK:t5NWYY5aEfdj4/A82tRb30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4801f3a4e1dc1bfe986aaccbab66bf_JaffaCakes118

Files

0b4801f3a4e1dc1bfe986aaccbab66bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6c8a129af62089c13302358d29074a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
LocalFlags
FindClose
CreateFileW
GetModuleHandleA
DeviceIoControl
GetFileTime
IsDebuggerPresent
LocalSize
HeapCreate
CloseHandle
CloseHandle
GetConsoleAliasW
GetStartupInfoA
lstrlenA
CreateFileMappingW
Sleep
GetModuleFileNameW
GetCommandLineA
GetDriveTypeW

user32

GetIconInfo
PeekMessageA
BeginPaint
DestroyWindow
DrawTextW
IsZoomed
DestroyMenu
IsWindow
CallWindowProcW
GetWindowLongA
DispatchMessageA
LoadImageA
DispatchMessageA

dmcompos

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

rasapi32

DwCloneEntry

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ