0b3a7ec7fe40ab0e817227653b0dc13a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3a7ec7fe40ab0e817227653b0dc13a_JaffaCakes118
Size

551KB
MD5

0b3a7ec7fe40ab0e817227653b0dc13a
SHA1

08c81432eb767f5d03245de742ccc1f04e48853c
SHA256

93a563b63d8d07626fca763e83a9bdd77815ee20ec556cdcc18a516f13f9f98f
SHA512

977e4a18f62b32061ab365b9abf2643d75fdf68a703ae5bbc24f926ea338f75eaa337a9ead13b42c86f2dbd02099f6471172fd441adf4f0ad2e709495749badb
SSDEEP

12288:BX6j5652LZ0ZWDdeSq/JwUyq61sFDkrlCm3+qcb:lj52LqZcs5JwUN61FJHcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3a7ec7fe40ab0e817227653b0dc13a_JaffaCakes118

Files

0b3a7ec7fe40ab0e817227653b0dc13a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81fea63ab23350daf6da2c5f91f18bd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTempPathW

msvcrt

memcpy
memcmp
memset

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 531B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 492KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ