0fca1165720a7f08a31ad9e01985e1f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fca1165720a7f08a31ad9e01985e1f5_JaffaCakes118
Size

56KB
MD5

0fca1165720a7f08a31ad9e01985e1f5
SHA1

dcf650acca11b976191351a67df455464509123e
SHA256

8d51297fbc65b97a9de7c16290f64c087c5262f2f96fda9f06c4e66fe8e5fb9d
SHA512

f82967db9a8d4e5d5be4428ac36281f33a8677a2791f7c78ef30bb006d0ae71609851328b22cca2489e31d4e9540190be8a3bd50bca1732fda03643deb167d58
SSDEEP

768:uJvkJOOv2yVoSQMC10iKDmp3c/XNYu718Dp+XGxEEv61nFmlNf2ZLgkOgXP7WhH5:Q8h2zpKQ3c/z89EoSFUNeBTWhHK5CzEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fca1165720a7f08a31ad9e01985e1f5_JaffaCakes118

Files

0fca1165720a7f08a31ad9e01985e1f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d6fb15a077e40c4ded48da99ad2e594

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalPrimaryComputerNameW
IsBadStringPtrA
GetModuleHandleExA
SetComputerNameA
GetThreadTimes
ReadConsoleInputA
LockResource
GetDiskFreeSpaceExA
ChangeTimerQueueTimer
TerminateJobObject
GetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE