0e8a0b0473a77db6b50d1a7d0a28c110_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e8a0b0473a77db6b50d1a7d0a28c110_JaffaCakes118
Size

36KB
MD5

0e8a0b0473a77db6b50d1a7d0a28c110
SHA1

df625a6e28d6a44b32f3d57d725036a43c67c3dd
SHA256

2a6fc95e1bea901b29dc75c9f6cfbeeec82c7360f03937914fa4661f06ec1dc5
SHA512

2b077eae9a860fea45508c5cc96934a2f15bfd30894ca32716eadc92e3efecd2f7e909b37ae2e3900d50db3688959581ea7f34f1f996394b4ce66ab334075770
SSDEEP

768:DAAS+lWk1YsktSYAgZR4aOmj39IimqhGgRjktI35:0t9yYskYYAgZR4aOmCimqhGgRg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e8a0b0473a77db6b50d1a7d0a28c110_JaffaCakes118

Files

0e8a0b0473a77db6b50d1a7d0a28c110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df0e79d97f00107506f8943f65032731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageA
DestroyWindow
DialogBoxParamA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetStartupInfoA
GetModuleHandleA
GetCurrentDirectoryA
GetLastError
LoadLibraryA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
fgetc
fflush
fputc
_controlfp
_initterm
memset
wcsncmp
wcslen
memcpy

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ