21f460bf48690e52f14185d12df9d079_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f460bf48690e52f14185d12df9d079_JaffaCakes118
Size

810KB
MD5

21f460bf48690e52f14185d12df9d079
SHA1

6f2a724b8a93b147cdee7cc6284a93db1550480e
SHA256

43c3fe040b4eee07343a5539444dcfeef20b7dd2328ede9b13f02321c83d5a0c
SHA512

2cac271fa555ca085a6956328145b5d884a0dc21db769ae2aa0f9efa27876836f861f5dff67ce4fd91c38cba2a2dc1ed39d3cf40380524efb8f6a99294e03159
SSDEEP

24576:vM0DFpuMtEo8WLyObzYxmW9RUmr3yg6sOHy4iF0brg:v4MtERWWfmW9/3yoOHy4iL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f460bf48690e52f14185d12df9d079_JaffaCakes118

Files

21f460bf48690e52f14185d12df9d079_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc5ad3d55d5f44950a33f3272d5511d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleW
GetFullPathNameA
GetLastError
GetLastError
VirtualProtectEx
GetCurrentDirectoryW
lstrcpyA
GetLastError
LoadLibraryW
CreateSemaphoreA
GetLastError
GetLogicalDriveStringsA
GetLastError
GetModuleHandleA
GetLastError
MoveFileW
GetLastError

onex

OneXUpdatePortProfile
OneXQueryStatistics
OneXQueryState
OneXUIResponse

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE