0c5cc85b76b6f2c9b7e608bd42d62f0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c5cc85b76b6f2c9b7e608bd42d62f0b_JaffaCakes118
Size

132KB
MD5

0c5cc85b76b6f2c9b7e608bd42d62f0b
SHA1

ff572c68184a4568e98b13c22d7c4b08b2c0ac07
SHA256

a48c480c5d143e9ac6df42693973b335310966a8cdcee393b96adfed1dc6b347
SHA512

61567ce010b7aa88f2a755c2646949498a84a6a5b93df7d0343807616a78a944e6d6ba2049e9b262070ee988df850b9031e25c7f37232f74cd83e4d0a12ac769
SSDEEP

3072:hdRcLjjYkrU4pVek/1K+94zV3Y0POQKw7P+y+PLOt:hoP8C791MXOQvG3P6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5cc85b76b6f2c9b7e608bd42d62f0b_JaffaCakes118

Files

0c5cc85b76b6f2c9b7e608bd42d62f0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE