0a1b98d646e6a26b9b0ccf50e911fcb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1b98d646e6a26b9b0ccf50e911fcb0_JaffaCakes118
Size

10KB
MD5

0a1b98d646e6a26b9b0ccf50e911fcb0
SHA1

fad657a62cd5f9bfa7bb6acfc8656cda4dbd6138
SHA256

4fa8922d7327d64316a4b5a0c546d3ed4ee9b766603517d0e42157a60ddb185b
SHA512

b2b315e0715bcbca43de94cfa2a4c399452692836be5cbda82a67e113b25c453d8b7122b0cccbd30aca8eef1311a58bae3360d962c3b277ce2e0062fddf75e7b
SSDEEP

96:rH7+/4CmRf0sKjoqTspdWNFJVx2oPaYpJT+JZDzvL4Hzfwfn2tdyk5+EzE:rhC/s0Dxnb9yOLzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1b98d646e6a26b9b0ccf50e911fcb0_JaffaCakes118

Files

0a1b98d646e6a26b9b0ccf50e911fcb0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3abf2d898dba3feddbae84797edeae98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
LoadLibraryA
ReleaseMutex
CreateDirectoryA
CreateFileA
ReleaseSemaphore
DeleteCriticalSection
GetModuleHandleA
GetProcAddress

user32

CreateAcceleratorTableW
ReleaseCapture
ReleaseDC

gdi32

CreateCompatibleDC
DeleteDC
CreateBitmap

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ