0f7493d58db7bae8a463386a648261c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f7493d58db7bae8a463386a648261c5_JaffaCakes118
Size

622KB
MD5

0f7493d58db7bae8a463386a648261c5
SHA1

71e5a889f7451bc826ef437a832168f6f3dc6ce7
SHA256

e249a538f291f14d47d33cca47a0c049955aecd36051e60a140ce33074f0f84b
SHA512

1b93dc3a2bc176febec671e811bb26482a51a3220a3607f14a1e7db60305ce48c7e80a6fbb2bf9c50f6803f73e9fa9fa6c7a046d96696252c7782c4efd4ae847
SSDEEP

12288:wMjw7ciObQp1tlvCSOzLiaRfHxWQe/72NqfMnG:b9bAv4zLiaRfRE/72NkMG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f7493d58db7bae8a463386a648261c5_JaffaCakes118

Files

0f7493d58db7bae8a463386a648261c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48f71aa6ff3ee053f742deed6bc9d534

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SetCursor
SendMessageA
SendDlgItemMessageA
SetWindowLongA
MessageBoxA
MessageBeep
MapWindowPoints
LoadIconA
PtInRect
LoadCursorA
GetWindowRect
GetDlgItemTextA
GetDlgItem
EndDialog
EnableWindow
DialogBoxParamA
wsprintfA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
TerminateProcess
SizeofResource
SetThreadPriority
RtlZeroMemory
LockResource
LoadResource
CloseHandle
CreateFileA
CreateThread
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA

shell32

ShellExecuteA

gdi32

SetTextColor
SetBkMode
CreateFontIndirectA

comctl32

InitCommonControls

comdlg32

GetSaveFileNameA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ