0dbd009e6d11fe05ad3ee57d0aed23ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dbd009e6d11fe05ad3ee57d0aed23ca_JaffaCakes118
Size

314KB
MD5

0dbd009e6d11fe05ad3ee57d0aed23ca
SHA1

424d0e7bb2f726ad6f77fa2243c704bcf15e6a1b
SHA256

2229bacbd62cbfe88f1ed51e41c1426459037aea584a6819337a32567a9bd9aa
SHA512

6b836e916cce6cc5129b9ad06b4a4cb85c7a2aa7be825b003eccede166f2e5888635b5ab855a30e4b99d6f61175ee8223c9fc5cc1c0279d6e312b90711000a1c
SSDEEP

6144:0yOFDvB41I1x5N2avu5E7BIesgOnDOr+I+:0TvB+I1/N2gu5E7BdGDOrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dbd009e6d11fe05ad3ee57d0aed23ca_JaffaCakes118

Files

0dbd009e6d11fe05ad3ee57d0aed23ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fb90c04b63e758941f499efb9e0eb79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
CloseHandle
lstrlenA
ReadFile
GetPrivateProfileIntW
GlobalFree
GetExitCodeProcess
FreeConsole
InterlockedExchange
ReleaseMutex
GetModuleHandleW
VirtualAlloc
ResetEvent
FindVolumeClose
GetDriveTypeW
LocalSize
GetMailslotInfo
GetCurrentThreadId
CreateFileW
LocalFree

user32

GetSysColor
DrawStateW
CreateWindowExA
GetClassInfoA
GetClientRect
GetMenu
DispatchMessageA
EndDialog
GetDlgItem
CallWindowProcW
GetCursorInfo
SetFocus
IsIconic

dsprop

CheckADsError
CheckADsError
CheckADsError
ReportError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ