0fb6649932fe91a6a3a7e3ab00b2ad1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb6649932fe91a6a3a7e3ab00b2ad1c_JaffaCakes118
Size

186KB
MD5

0fb6649932fe91a6a3a7e3ab00b2ad1c
SHA1

a86d50d6f4dac7af4adadf766084a8eb43770ee1
SHA256

ac8a4e082e1dea30ad1a5cc58c1a3c9ffa1f296584c554a9f159266d9d1ef896
SHA512

e381ae4b69226874745d3919ebc60570860dc44d947478f6408c0efeb02cc5665c6af369e02b053258bebf42d6219e19912c3666b184ab6a3558b255fa9cf0c9
SSDEEP

3072:jfqwr8WWCaZXkzgcjKCSkDERpa7yfHIsdR/SMdI8K0X/pWeejnx38QO8tI4qqe3N:jf1BWCYyjfSq6pamhdtSMh5Xojnx38QS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb6649932fe91a6a3a7e3ab00b2ad1c_JaffaCakes118

Files

0fb6649932fe91a6a3a7e3ab00b2ad1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7daee1e35a1f8d5daa0d9b2c8266ed8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

kernel32

InterlockedDecrement
SetProcessPriorityBoost
CreateProcessW
CreateEventW
GlobalAlloc
Sleep
EnumResourceTypesA
CreateFileW
DeleteCriticalSection
GetModuleFileNameW
WriteFile
GlobalLock
TerminateThread
GetModuleHandleW
ReadFile
GlobalUnlock

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ