0d63a438adf074739fa13adbf15b9c90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d63a438adf074739fa13adbf15b9c90_JaffaCakes118
Size

44KB
MD5

0d63a438adf074739fa13adbf15b9c90
SHA1

a736f8a220ad8420299af5128c53108123fe1ed3
SHA256

bc09efc7ac4256ebcf9e1b4bc9ccffa8990fb24c0a6582d638b985a7c9b318d6
SHA512

5ea5523cd5658fedc7ac05b4ec3ad0080f22c1aeb6b2062c911f4388841e581d73c2f1c85ef0abf4b2e26a512ed291f9b9088d7118a483b8c99088d6a3ee1ad9
SSDEEP

768:PB4xf2x+v8CtGxjCu7rbJ323fvjmG8QnznGX3FA:CxM+v32jCuPQDmG8Qnzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d63a438adf074739fa13adbf15b9c90_JaffaCakes118

Files

0d63a438adf074739fa13adbf15b9c90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df0e79d97f00107506f8943f65032731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageA
DestroyWindow
DialogBoxParamA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetStartupInfoA
GetModuleHandleA
GetCurrentDirectoryA
GetLastError
LoadLibraryA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
fgetc
fflush
fputc
_controlfp
_initterm
memset
wcsncmp
wcslen
memcpy

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ