0bde3d904f5fb6b48817c98fc2cc8376_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bde3d904f5fb6b48817c98fc2cc8376_JaffaCakes118
Size

702KB
MD5

0bde3d904f5fb6b48817c98fc2cc8376
SHA1

075c7f34fe11c19425a99ce2fed46da7dc83a898
SHA256

89aa0f3b86b8395706bfc744481e211c6e94a7726cf82e00f90ca32f4bff9d31
SHA512

3b71531ad6528a087f754ec9c5be87fd8bbe03e6a4537d59530b4f80115b5c369ad0323b3cb379dbd6c419342a5bfa2b932ce78d1e17e94bfb84b2e0dd71e96a
SSDEEP

12288:hxRtBuYfvLBxlkfGppCYKEOZ9Zv5xG5tozHVGAwIs0bJpQzlK:htlfNkfwCYuZ9bxaw3v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bde3d904f5fb6b48817c98fc2cc8376_JaffaCakes118

Files

0bde3d904f5fb6b48817c98fc2cc8376_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b80a7b1da298364d55670c441dd9a038

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE