0ae9d4d3835e33ff232e2629b3bcfda2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae9d4d3835e33ff232e2629b3bcfda2_JaffaCakes118
Size

441KB
MD5

0ae9d4d3835e33ff232e2629b3bcfda2
SHA1

330be2fd9c3a8f93ba25206dea5b198be020c7b5
SHA256

41df03045ad2b415300f66bd5aacb5b2efbd068b45bb8213b9eed1f6106891d0
SHA512

f4805fb2f99e32e61e2534b0559ee4b4dec7b7f1d639816850a2fb9e7bec576c4a059d078b52c25021a282f1d8868baf727052228e5403be8e58d090d03d6935
SSDEEP

6144:G1YRDSq+hAEsf3M7rc6JauUwoZQGTZ+YsdQ1x2xp+VkqP7FD2tT1atZuYggKgxx:oBALfkrIuyur+qWDMT1atYYgA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae9d4d3835e33ff232e2629b3bcfda2_JaffaCakes118

Files

0ae9d4d3835e33ff232e2629b3bcfda2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7c84a2c17c3ffeba0101b77b1282667d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue

user32

GetWindowTextLengthA

gdi32

GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor

Sections

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ