0f66a3e2e6179926cbc4f8d90b0a41c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f66a3e2e6179926cbc4f8d90b0a41c0_JaffaCakes118
Size

33KB
MD5

0f66a3e2e6179926cbc4f8d90b0a41c0
SHA1

6ef4b229283ea77bd841a78f1a837bb4f55f094f
SHA256

6698e335143ff778b0f1e1daf54a3196aec17c5f1e03bc67a19f8abf876a272a
SHA512

62c04023249a7acc937039afdbd772ac16c41a790f853a5c483b06953c36cfc55303bc194f9e3172ac822c2514c799d0efe6764aa32f86ec6cea599d0c5f375f
SSDEEP

192:h5lwzN3KjEKVcNP1oyngV5VnrKzd3kRRRRRRRRRRh1Zcccc0icZLyRRRRRRRhn:h5yzN3QEKVc51WV5VmR3w1WigL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f66a3e2e6179926cbc4f8d90b0a41c0_JaffaCakes118

Files

0f66a3e2e6179926cbc4f8d90b0a41c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

895ad38dd2910ca2272b8d8306ac2095

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

i h h

Imports

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
__set_app_type
memset

kernel32

GetModuleHandleA
Sleep
LoadLibraryA
GetProcAddress
GetStartupInfoA

user32

GetMenu
GetListBoxInfo
GetLastActivePopup
GetSubMenu

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ