0dd6b7a6a9c6c748d22bb3f1064b87ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd6b7a6a9c6c748d22bb3f1064b87ed_JaffaCakes118
Size

62KB
MD5

0dd6b7a6a9c6c748d22bb3f1064b87ed
SHA1

0f761364ad08ade90865c4e94c34a6bb40256199
SHA256

69bbd80d73aad26e61bacb9a6052102c695aa6bb3246a4f41dfd7f51d9422967
SHA512

9510b92ee7dd80d03afa6d1b8fce5662e68e72f29e137165df739a9d85a8ea85720420110dcbc2643ce5f846504535fdd846f0f8dc5aaa45d4924aeda73adeac
SSDEEP

768:7esOgwFrmXtMFVIXfkCzF4ujdJ0/gXI1zkj6OU/mQAm+ye9+i94:ZOramfmthjdJVICPU/mNmu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd6b7a6a9c6c748d22bb3f1064b87ed_JaffaCakes118

Files

0dd6b7a6a9c6c748d22bb3f1064b87ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6c8ecfd8e83b1b5569bf3f5e36214e9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathMatchSpecA
UrlCompareW

kernel32

lstrcmpW

user32

GetTopWindow
GetClientRect
GetParent

Exports

Exports

ExoPortalIE
?SelectionUpgrade1@@YG_JEPAXUfurrone2897320391401938091831@@WE
?SelectionUpgrade2@@YG_JEPAXUfurrone2897320391401938091831@@WE
?SelectionUpgrade3@@YG_JEPAXUfurrone2897320391401938091831@@WE
?SelectionUpgrade@@YG_JEPAXUfurrone2897320391401938091831@@WE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zero
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ