0a57dae84ef4107f90ad831dc20ce97f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a57dae84ef4107f90ad831dc20ce97f_JaffaCakes118
Size

351KB
MD5

0a57dae84ef4107f90ad831dc20ce97f
SHA1

a2af61daf8c5756425583c9e1a71b3ee9ce508cb
SHA256

cd8f90c82b6e71b8ad96b94a07e9b279a3b119042f08dc4077cd4933389f8978
SHA512

ab7d7133060e4c7be1c1f061c1af5b273204e8322acc837a4f1f8785d722e3710b958ccf9aca3bf3ee012f5c76a4f07433d36d9278893da5c68d21dc3a270599
SSDEEP

6144:eM4XLY+YbkK2vglG3Q9XavhHf2I9fNyTNHU2vyFbJZ3IiWedZzFcJUGVpGx:aXX6kxFQ9qvhH591yTXvKbJZ49edZxcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a57dae84ef4107f90ad831dc20ce97f_JaffaCakes118

Files

0a57dae84ef4107f90ad831dc20ce97f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fce67081bb4c464c1e4676b63bc118df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 219KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE