0b5db6155d3f7d6329c09cc2ee15cc23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b5db6155d3f7d6329c09cc2ee15cc23_JaffaCakes118
Size

132KB
MD5

0b5db6155d3f7d6329c09cc2ee15cc23
SHA1

312ada9397fa829f355028ac00837bc3071b77ba
SHA256

c4268ea5959ea88260be51906977627d72b435c42b82f20baee5245b98f5e140
SHA512

666f5a2bd3d5fdceaa6f8eea076632af2a8938da768e800d4529cc3a70016c2aab9f4be747ec37cbfc9f986d124a58a74bd6a5e47d4872cb917bf73fee8ebb0d
SSDEEP

3072:pYd0DcqxFTw3AizDh80hOuGAyCQ0BHjWKcbQ+:pBDxx57iPh8oOuGAyCQ01Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b5db6155d3f7d6329c09cc2ee15cc23_JaffaCakes118

Files

0b5db6155d3f7d6329c09cc2ee15cc23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE