0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118 | Triage

Sharing

General

Target

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118
Size

75KB
MD5

0f9dcdd9e2b769cd8496e5f87376a805
SHA1

f772b77633159cec736a0d3993da705d2845e15f
SHA256

c2ddfd999e58c0cce9f42ffa675570ccdda5c94a6946d8ff583d9fa1a8ffe4a4
SHA512

a74fe59958da74248fad377225c899c1c8400b75b0fff6fb7835b220b19bf3b70d7512fb3043df776ae5a3cbc98251a29f6ee638546805b57fe50cfee9bbeaa8
SSDEEP

1536:qUaySrC1D5Ngs+fngwQrZlnedrX6v1ARMC0+DOBXcOiIY2yN:ZvvZbr2rX6vQMC0+61K1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118

Files

0f9dcdd9e2b769cd8496e5f87376a805_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c49d68c0f4ffc859a0730f9d64be5ed6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileA
lstrcatA
GetWindowsDirectoryA
LoadLibraryW
GetModuleHandleW

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xata1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xata2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ