10e0cc4bad2479edcddc628f1521cdef_JaffaCakes118 | Triage

Sharing

General

Target

10e0cc4bad2479edcddc628f1521cdef_JaffaCakes118
Size

66KB
MD5

10e0cc4bad2479edcddc628f1521cdef
SHA1

1fe1ef14416c00467b6e2327310feecbfc1615db
SHA256

e64c6fe6cf8014b1d694267c2fc5c1916267762b8120379bbc6ac9007e98b20d
SHA512

94adbe552d29112b1ac474af315822f84965e5dc5cb9b15a203422a1a8334d410b39e624e4edef37b7fe279b99d100bc46be0db46188b0ddf822f8b1d8f9c746
SSDEEP

1536:eiChNjz2APY0RhdJR7dWISZXSxE9IpXx2TB:IhNVXrWIkSxE9IfEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10e0cc4bad2479edcddc628f1521cdef_JaffaCakes118

Files

10e0cc4bad2479edcddc628f1521cdef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce0c6fcee243ec9ec7981c18f26c27c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GlobalAddAtomA
GetProcessHeap
VirtualAllocEx
GetACP
LoadLibraryA
ExitProcess
GetCurrentThreadId
VirtualAlloc
GetVersionExA
GetUserDefaultLCID

user32

LoadBitmapA
GetWindowThreadProcessId
GetMenu
GetWindowTextA
CharNextA
IsWindowUnicode
OpenIcon

Exports

Exports

KV4LV91Sk@12
Lx7NEWveK
_I4EQVRl6@12
ti8TCDPczhQx@4
_uegJBuuNxoR@24
0KSvX1lb3JQs@20
AgKCeF@12
_AdJgVR_@16
_4EHmT4kvewdk1U
_8odnzUGeCIe@20
ea0tt7bHnEE
_pyZsffXK

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/string.txt
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/BITMAP/BBALL.bmp
.rsrc/1033/BITMAP/BBCANCEL.bmp
.rsrc/1033/BITMAP/BBCLOSE.bmp
.rsrc/1033/BITMAP/BBHELP.bmp
.rsrc/1033/BITMAP/BBIGNORE.bmp
.rsrc/1033/BITMAP/BBNO.bmp
.rsrc/1033/BITMAP/BBOK.bmp
.rsrc/1033/BITMAP/BBRETRY.bmp
.rsrc/1033/BITMAP/BBYES.bmp
.rsrc/1033/BITMAP/PREVIEWGLYPH.bmp
.rsrc/1033/version.txt
.text