0c34ff3b6946b02cbbe6e848bda03fae_JaffaCakes118 | Triage

Sharing

General

Target

0c34ff3b6946b02cbbe6e848bda03fae_JaffaCakes118
Size

70KB
MD5

0c34ff3b6946b02cbbe6e848bda03fae
SHA1

da4c5a150fc57573c18f4bcf71791707b5862e42
SHA256

ab7f9160eadd2489b5e538c049c71604730690f7ea6053c1a0b2e5ac2124aeb6
SHA512

0237bfecc5542d3e73c78d4e9d7e2af0f6d9e3810babb948e7014be6217a5a2c18e630eb1dc26914e8958bbd4bdbe5e0af50fdd0476e40aab89c0e1026406621
SSDEEP

1536:dsgGFZfAG3Swr1CTixGw3vlWsj0J975AqEN:LGFZfRV1CTaGw3EsS976N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c34ff3b6946b02cbbe6e848bda03fae_JaffaCakes118

Files

0c34ff3b6946b02cbbe6e848bda03fae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19c546b0b9112e686747fb02c941e399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
VirtualAllocEx
ExitProcess
VirtualAlloc
GetCPInfo

shell32

Shell_NotifyIconW

user32

GetMenuItemInfoA
GetMenuState
GetMenuItemID
EnableWindow
GetCapture
GetWindow

Exports

Exports

dZ_U1UHoi@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text