0fcc3b897d9a6e3aabd134ca3730ba22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fcc3b897d9a6e3aabd134ca3730ba22_JaffaCakes118
Size

582KB
MD5

0fcc3b897d9a6e3aabd134ca3730ba22
SHA1

36b7a28f6e9e805a668aa9a6247ca9d47ebb0ed5
SHA256

1565a8f97385c06f5a4f82a42a46e0de2dc11a8afacb01100a2591e5efd1bc95
SHA512

660d9b6edb1432bf1a9fe299a69ab7bb68d0607c7fff4613820cf61682a8280906c3530457989995483835015e884980b7fefe9e34503a61a8ab37f819abfe8c
SSDEEP

12288:hxRtBuYfvLBxlkfGppCYKEOZ9Zv5xG5tozHV2kbqv:htlfNkfwCYuZ9bxawPbqv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fcc3b897d9a6e3aabd134ca3730ba22_JaffaCakes118

Files

0fcc3b897d9a6e3aabd134ca3730ba22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b80a7b1da298364d55670c441dd9a038

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE