0fbb453994de98f5c96ea5b60c0c6d7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fbb453994de98f5c96ea5b60c0c6d7e_JaffaCakes118
Size

150KB
MD5

0fbb453994de98f5c96ea5b60c0c6d7e
SHA1

b10f0fb78600c00be37bffc9901e97c500908f38
SHA256

d6d0fea5f35c96e92f2dd3995965267a175332de89c34d10792c97b33578d559
SHA512

81e9caaf11ea75426cabf1472a5b9c7cfc214176119dbf7a10ff0244e8eea2ee566b43bdf9a7cc7a868cdae98b9bae29203544b367938acedfb86b0173098288
SSDEEP

3072:uYgpSWnpjJxcDdpeO4DU2DmYGVRbbbD/VitujKiz5Jjo/2:BZ2r7dDU2+V/VpDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fbb453994de98f5c96ea5b60c0c6d7e_JaffaCakes118

Files

0fbb453994de98f5c96ea5b60c0c6d7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78cbf2090dd30eef437d9dc62298b4d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
FindResourceExA
CloseHandle
GetModuleHandleA
Sleep
CreateThread
GetTickCount
DeleteCriticalSection
GetLastError
lstrlenA
GetDiskFreeSpaceA
SearchPathA
TlsGetValue
VirtualProtect
FindVolumeClose
GetCalendarInfoA
ExitProcess
ReleaseMutex
FindClose
SetEvent

advapi32

IsValidSid
FreeSid
RegLoadKeyA
GetFileSecurityA
CloseEventLog
AccessCheck
RegCloseKey
LsaClose
LsaSetSecret
LsaFreeMemory
CloseTrace
RegCreateKeyExA
RegEnumKeyExA
OpenEventLogA
RegCloseKey

msdmo

DMOGetTypes
DMORegister
DMOUnregister
DMOGetName
DMOEnum

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ