0fd62ef538841fd1f36c6270718c5e6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd62ef538841fd1f36c6270718c5e6d_JaffaCakes118
Size

63KB
MD5

0fd62ef538841fd1f36c6270718c5e6d
SHA1

582c8f84ab34d4a53995f998bc5ee1f46c270a64
SHA256

3fa70409d7f36689b11fa9561535013adeb6e57c4d978cf9b3c79ba75e40cc7a
SHA512

4d961c2be2e5b9fae98f4cd22118cd1861ebe8282fd3118ac37c899397bc6a922d5d666decdb4514c3052ae96ebcae7ebe361548126d709989cfe772f0150377
SSDEEP

1536:C38bEyHcrfWkxUKn1a7sPVLnH4DI+iZMUAu:CMbkrvUKn1agRnH4DI+H7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd62ef538841fd1f36c6270718c5e6d_JaffaCakes118

Files

0fd62ef538841fd1f36c6270718c5e6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ