0fa29507bbc827eb86b102492473d102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa29507bbc827eb86b102492473d102_JaffaCakes118
Size

48KB
MD5

0fa29507bbc827eb86b102492473d102
SHA1

3920d801bf1b3be9b3152856e01b2d8717cb1247
SHA256

dcfd54250bb64547288cf7f044aaf0cfac26115e4f908345abea81a1fe9a146b
SHA512

c8aecab13334c46428a14a0ffdaa7ef1362cd1a833463b0455e834d0da503949df009668360d386b8a37c58fa42f71326caf4545854d7e1a1af544f17113aa4e
SSDEEP

1536:V0AXprYeAa7iTuR9Efr7T92ZjgqlBFiRO5WgocL:V0gMeAKiCR9EfT9qjgqlBFj5Wo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa29507bbc827eb86b102492473d102_JaffaCakes118

Files

0fa29507bbc827eb86b102492473d102_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32dac45a2671c8efd311205950be4a33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FindMediaType
HlinkGoForward
CopyStgMedium
UrlMkBuildVersion

ntdll

RtlCreateAcl
ZwSetInformationProcess
RtlAssert
RtlCompactHeap

Sections

.text
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE