0df758f1248a562927f99ba563afbfa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df758f1248a562927f99ba563afbfa7_JaffaCakes118
Size

292KB
MD5

0df758f1248a562927f99ba563afbfa7
SHA1

927d84bc58529025fb04cb199a1c631cd5cb4246
SHA256

935f33d033ad8226277ebdc88bc7f3493806d541649c6a8af628330fbaa7c6f1
SHA512

e89bb9700243b5cdaaaa754d63552606b80cd8e4799634250af74e76ab91bef818da1d1365ea327d516a25551d3b7b2e52ef3cfbcc68cd62deb2087321cbcae5
SSDEEP

6144:RbP4atGPXsr2kegJh7+IeDnF7q0/BTO0u3TvLZYsQY4pVcBNZ:ZP4aEPXI2keg3yzrO0u3TvLZYsQYHZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df758f1248a562927f99ba563afbfa7_JaffaCakes118

Files

0df758f1248a562927f99ba563afbfa7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

80f1996f17e89381d4424e0d4d99f931

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollInfo
GetWindowThreadProcessId
EnumDisplaySettingsA
GetThreadDesktop
GetActiveWindow
EnumWindows
SetWindowTextA
SetDlgItemTextA

comctl32

ord17

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetStartupInfoA
GetUserDefaultLangID
GetTickCount
SetFileAttributesA
GetSystemDefaultLangID
GetDateFormatA
GetHandleInformation
IsBadReadPtr
GetProcAddress
FreeLibrary
LoadLibraryA
HeapAlloc
HeapCreate
DeleteCriticalSection
InitializeCriticalSection
GetTimeFormatA
GetLocalTime
LocalFree
LocalAlloc

Sections

.text
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ