0e1d78cba9dc6dc8c4b22f5dd7162450_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e1d78cba9dc6dc8c4b22f5dd7162450_JaffaCakes118
Size

48KB
MD5

0e1d78cba9dc6dc8c4b22f5dd7162450
SHA1

a4cecf5a60c6cd9b0c7efcd996d66feda21b2007
SHA256

eb093517257a8bc0694938aa1bdd2a522db18e37586cc6a58eb067329c3e2f90
SHA512

99f2e4916b278d6f1bb39988ca1d7bf509c50d2b596534c32e543f78386771a479b468fbd17910e5ca6fd4f95405e550d2db7f9a78908c1adfce091188bc25e7
SSDEEP

768:kjThpf9mn5dGHQGPLpI1CuERbHxq9k7AsjW4B076TU6stnlG:kjTrmMpw8bHP7AsjW4S76A6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1d78cba9dc6dc8c4b22f5dd7162450_JaffaCakes118

Files

0e1d78cba9dc6dc8c4b22f5dd7162450_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fae9e28967c8220863a3d68ac7e8f97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetMessageA
LoadStringA
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
SendMessageA
DefWindowProcA
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
EndDialog
CreateWindowExA

kernel32

GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
GetLastError
LoadLibraryA

shlwapi

PathIsDirectoryA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathCompactPathExA
PathMatchSpecA

crtdll

_commode_dll
_XcptFilter
_local_unwind2
_global_unwind2
_fmode_dll
_exit
__GetMainArgs
_initterm
_acmdln_dll
exit

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ