0cbfd407d62bf4e4f3ab6d59a6579b58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cbfd407d62bf4e4f3ab6d59a6579b58_JaffaCakes118
Size

20KB
MD5

0cbfd407d62bf4e4f3ab6d59a6579b58
SHA1

b649853b6d4a004514f479e9f69efa3551af2d42
SHA256

b36ce7b12c41ab2b2732ddda2241e40b4fb897c5affe6ad44924d93b9064f1f4
SHA512

448490691cca8030eb4bed41024c62a81fd51f86c2dfc2bdda996569d71691ffbe485a331a93fc68286e4ebc7fb3bbfb65392855a012e08ed2f50577f63da9c8
SSDEEP

384:zHv8giZwOcfyL01UcSaf8wf/8KrC9updUjiWVDrsH1g:z/cClCBwf0cR8iWaH1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbfd407d62bf4e4f3ab6d59a6579b58_JaffaCakes118

Files

0cbfd407d62bf4e4f3ab6d59a6579b58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0c0a52023ddf031f7d5cc1b2b52c624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
VirtualProtect
InitializeCriticalSection
GetModuleHandleA
HeapAlloc
GetProcessHeap
TerminateProcess
VirtualAllocEx
HeapFree
VirtualAlloc
lstrlenA
GetLastError
LockResource
lstrcpyA
SizeofResource
FindResourceA
WritePrivateProfileStringA
GetTempPathA
CloseHandle
WriteFile
SetFilePointer
ExitProcess
ReadFile
GetFileSize
CreateFileA
CopyFileA
GetModuleFileNameA
lstrcatA
GetProcAddress
LoadResource
LeaveCriticalSection

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

Exports

Exports

szFile

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 927B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ