0f275858ad45ea2ed0898402239f148a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f275858ad45ea2ed0898402239f148a_JaffaCakes118
Size

751KB
MD5

0f275858ad45ea2ed0898402239f148a
SHA1

40b2e76aa740ff6328af0ef4c7867d1583c385ef
SHA256

e8a02cbc7a7c18f088cc183d2c4bb77d5cb2804e3b75fb6fcb5d6e65a5a84724
SHA512

75d4d30c97b586a6c1959deeb53f17b412de89ce774cd60a4cccbd85303951dadbbea3a8b6b7f991685b71501cb4ddd2e2e7cd2a76e7d86036d4b201b608bbe3
SSDEEP

12288:9OWByW3gi3pnOx4n4iRSCNFaSuS9z633elRc6xa24+fr2iIIQbTFbEN:9OpWbMmcSuf33oC6Aqc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f275858ad45ea2ed0898402239f148a_JaffaCakes118

Files

0f275858ad45ea2ed0898402239f148a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e8304aea96cef817cb72d080b28177e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetEnvironmentVariableW
VirtualAllocEx
ClearCommBreak
WriteConsoleA
SetLastError
ResetEvent
CancelIo
ExitProcess
CreateMutexA
SetEvent
OpenProcess
DeleteFileW
GetModuleHandleA
GetTickCount
HeapSize
GetStartupInfoA
CreateFileA
RemoveDirectoryA
GetCommandLineW
ReleaseMutex

user32

GetClassInfoA
DispatchMessageW
FillRect
GetWindowLongA
GetDC
GetCursorInfo
GetSysColor
GetDC
DispatchMessageW
FindWindowA
CallWindowProcW
GetDC
PeekMessageA

lpk

LpkExtTextOut
LpkExtTextOut
LpkExtTextOut
LpkExtTextOut

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ