0a51ae23836bb6900117789052f55cb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a51ae23836bb6900117789052f55cb9_JaffaCakes118
Size

36KB
MD5

0a51ae23836bb6900117789052f55cb9
SHA1

3ab11c4714fe3eee632fe7195482d381a7ace729
SHA256

12aec14137435a269249eaaeb4aa1cd4b4da7610dc1c9d949570eee276b62595
SHA512

0ff348e119f22b59004f738d7b3a8ba74acdc476b127ef30d60071e4549a6dbd6c6faa67adfce10f0c906ff880578045d64bee703d121347b2db39ec3eb89940
SSDEEP

768:hdbpFc+rZ74W8jcTbXCMP6QyskK9xnj2V99YOn8+JbzPe:T1zrZ3yMP6QystnfOn8+J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a51ae23836bb6900117789052f55cb9_JaffaCakes118

Files

0a51ae23836bb6900117789052f55cb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5e1dfc24c9f4fb8f85937b8b6b7f2cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrlenA
WaitForSingleObject
GetLongPathNameA
HeapAlloc
WaitForSingleObject
OpenEventA
FormatMessageA
FoldStringA
HeapDestroy
Sleep
HeapCreate
lstrlenW
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
lstrlenA
HeapFree
CompareStringA
VirtualProtect

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 523B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE