0d22ed6900a101343841ac8a37e52c40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d22ed6900a101343841ac8a37e52c40_JaffaCakes118
Size

124KB
MD5

0d22ed6900a101343841ac8a37e52c40
SHA1

0025c6bb06fa2e6060cf9798bdc6a4c4007c2336
SHA256

d58e3fd63fea7930a74c04bbb30acbfe7fd66b9d3740af08edb884914eadaec8
SHA512

6c96aa6ab1efcb46523b071e18fa3c4294edb7859d88dba0778d9190bebe9b5bb883ab64d19e4fc67350405dca54cb6477a54c3b511fdece4b1b4c14b430d1c9
SSDEEP

3072:RxBu+Rr/B6QV3PTrzjkaQkboZ61s+PQBOu0Fu:RTFbxbkaboZ0sJBf0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d22ed6900a101343841ac8a37e52c40_JaffaCakes118

Files

0d22ed6900a101343841ac8a37e52c40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6429fdfd0a1b174b48e6a7ef0ec705b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
LoadLibraryA
lstrcmpiA
GetProcessHeap
GetLastError
VirtualAlloc
lstrlenA
GlobalAlloc
lstrcmpA

user32

OpenIcon
DrawTextA
EnableWindow
GetMenu
GetFocus
EnableScrollBar
EmptyClipboard
GetDesktopWindow

shell32

Shell_NotifyIconW

Exports

Exports

_A3oX5i3Z

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text