0a19d3869a2484c24b2d19641cc8ff69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a19d3869a2484c24b2d19641cc8ff69_JaffaCakes118
Size

56KB
MD5

0a19d3869a2484c24b2d19641cc8ff69
SHA1

df025a21a305706d22fc71aa58f1a4f9d9d267dc
SHA256

4c1996851b91845725509e07146786b6cc09b289da74a8bc7934a9c6ebe6701b
SHA512

7e5c73bf540ef8961fea721e19b7ae8fe0b3b2ad2736767cc028b3fe55e2a22a671c7ca106f2aaeb26212eb777fd3c145cca21000ef1882a032c0d4c779392fc
SSDEEP

1536:9PhN782vk0eEWr82/u6wz1q1lx11KVNwlW/:B78Kk0eEuHuV1NwlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a19d3869a2484c24b2d19641cc8ff69_JaffaCakes118

Files

0a19d3869a2484c24b2d19641cc8ff69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9a4a75241382d8564ae57f7ab654cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
CloseHandle
WriteFile
CreateFileA
ReadFile
SetFilePointer
GetModuleFileNameA
OutputDebugStringA
lstrlenA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
SetFileAttributesA
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetTickCount
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
CreateProcessA
GetTempPathA
GetFileAttributesA
ExitProcess

user32

GetCursorPos

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ