0f01dc764bd11b1d26a00c2426abee50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f01dc764bd11b1d26a00c2426abee50_JaffaCakes118
Size

225KB
MD5

0f01dc764bd11b1d26a00c2426abee50
SHA1

1bd4ab419de90bb8754cf4172377a6c3d00bc294
SHA256

62d4a3121bee599a8ec28b79b710601cc734d1ef385b84146d8eb1306958863b
SHA512

bd8c3c7e3a7977d65cac993815572b18123de82114e9bba8f6497cff62f8bdf3f3293402c1983797d726a718b688a6aee604a14994762bdd09cffa21550dfba7
SSDEEP

3072:NSVngcAzPxA6iUX1GVl13O2puAZLeiPBV/fj2zQe0Bd/dyD/biql:4lEPxFiUX1w+KLZiO/L2Ee0Pyziq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f01dc764bd11b1d26a00c2426abee50_JaffaCakes118

Files

0f01dc764bd11b1d26a00c2426abee50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac634644909ebc083fcb9ee05183f899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
LocalFree
MoveFileExA
MulDiv
GetACP
LoadLibraryA
VirtualAllocEx

user32

CreateMenu
KillTimer
GetMenu
GetWindowDC
IsWindowEnabled
IsZoomed

Exports

Exports

IQb@24

Sections

CODE
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sjdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ