f0bb4eb06df16dda25b7a350a1bea880_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0bb4eb06df16dda25b7a350a1bea880_JaffaCakes118
Size

12KB
MD5

f0bb4eb06df16dda25b7a350a1bea880
SHA1

9677a0a8e324dd63efedc274eb2548098f1b3f23
SHA256

8fdf32caba074e5f26fcbcbe1c7211586848e751e0a58009490d588d7c6b4da0
SHA512

5b6d989c2a3a01a5f74688395ef71f0c688b74be3680175dfe49f8e64b22adf8dc49ec75c4effbe7e18493b133ad511bf0dc35cff0b43523984241834af01663
SSDEEP

96:nPUs7OGluXiKjug9J+Q8sAhf/LMY7w+l8mb0l74zD1rx78GIz4BO0dKljdMR:ncsYXE99f/Lk+imY5qDz4GI+5KZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0bb4eb06df16dda25b7a350a1bea880_JaffaCakes118

Files

f0bb4eb06df16dda25b7a350a1bea880_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8f8cf676b456b4fc42fb0362e8d00dbf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
ExitProcess
CreateProcessA
GlobalAlloc
GetTickCount
FindNextFileA
GetCommandLineA
GetCurrentDirectoryA
CopyFileA
FindFirstFileA
CreateFileA
GlobalLock
GlobalUnlock
MoveFileA
SetCurrentDirectoryA
SetFilePointer
WriteFile
lstrcpyA
GetSystemTime

user32

SetClipboardData
OpenClipboard
MessageBoxA
ExitWindowsEx
EmptyClipboard
CloseClipboard

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ