0c3832e5e50f7a4533431ab7e1fb2e67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3832e5e50f7a4533431ab7e1fb2e67_JaffaCakes118
Size

124KB
MD5

0c3832e5e50f7a4533431ab7e1fb2e67
SHA1

0610d1030663700d31759e1d282457c5e65b09f8
SHA256

a54b5d0ec07afa1580ea3c9c668392a93ca451009403a15d050e6a26bf822f8a
SHA512

6e486a507253233b6503130ba953ca30280a74f761b6c2f5aed58da9f7ad7e1e03fa6cb8fd86dad4c524505288bdb46ad7c31da312acfb33c74af5bc7c317578
SSDEEP

3072:S+0mcXinO63YdJhMA6QeszabPuScdRwIfDVp:dcXinOHEQewabPVcdmIfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3832e5e50f7a4533431ab7e1fb2e67_JaffaCakes118

Files

0c3832e5e50f7a4533431ab7e1fb2e67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f48ff5d58f2f51d18959ff793b53ce1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA

gdi32

GetBitmapBits
GetBkColor
CreateCompatibleDC
CreatePalette
CreateDIBSection
CreateFontIndirectA
GetDIBits
CreatePenIndirect

user32

LoadIconA
FrameRect
IsMenu
CreateMenu
GetMenu
GetActiveWindow
GetCapture
IsChild

kernel32

LoadLibraryA
GetCommandLineW
GetModuleHandleW
GetCurrentThread
IsBadReadPtr
ExitProcess
VirtualAllocEx
lstrlenW
IsBadHugeReadPtr

comdlg32

GetOpenFileNameA

Exports

Exports

_DQBciIDiF@24
E33Ao@12

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ