b10bf287658f0b3076f5594ff1e560e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b10bf287658f0b3076f5594ff1e560e6_JaffaCakes118
Size

809KB
MD5

b10bf287658f0b3076f5594ff1e560e6
SHA1

41c96a44c11d0fa2b7e3df9cdc4eda3f1f26cc61
SHA256

d6c6a0f4cbcd7d7960b2cd997e8df4498969ffebf5aba2f1df1a29d0d8ffe74d
SHA512

295929784dc19b02822c86ce7cc8c0cb1887c372b47506e4f87c5b08171aee141e283b0c45f3ac0975d5802f47c89171e274c7bf3e010b3bebdfc6e2c9c7d61b
SSDEEP

24576:pM0DFpuMtEo8WLyObzYxmW9RUmr3yg6sOHy4iF0brg:p4MtERWWfmW9/3yoOHy4iL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b10bf287658f0b3076f5594ff1e560e6_JaffaCakes118

Files

b10bf287658f0b3076f5594ff1e560e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a6099bb40412211f9a5a96b4674e3f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcpyA
GetLastError
GetLastError
VirtualProtectEx
GetLogicalDriveStringsA
GetLastError
MoveFileW
GetModuleHandleW
CreateSemaphoreA
GetLastError
GetCurrentDirectoryW
GetConsoleTitleW
GetFullPathNameA
GetLastError
GetLastError
GetModuleHandleA

onex

OneXQueryStatistics
OneXUIResponse
OneXUpdatePortProfile
OneXQueryState

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.Data
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE