0ff89142c43071c2771994c2793d5255_JaffaCakes118 | Triage

Sharing

General

Target

0ff89142c43071c2771994c2793d5255_JaffaCakes118
Size

25KB
MD5

0ff89142c43071c2771994c2793d5255
SHA1

4e0fe6127288f490486f3838661cad1fdbef7d3d
SHA256

6d1a4781acc6aa448122c5971d2542c56fe87dc62b66977b6403a86e69edf426
SHA512

c37cbff622cec0d7553f2679e01382b7af760dadefd665b91a0b153e16bb063fce452608ae8f7c1f001266a3066efaa18374ddbcb7d7dc487f23ecffdea26646
SSDEEP

384:4F/wt1EkmlMvGfanyyL/rh6o/TGzUgyecJI0vMGGBhBSV:40Wuyqjh6o/HXW0vMjBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff89142c43071c2771994c2793d5255_JaffaCakes118

Files

0ff89142c43071c2771994c2793d5255_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e387d9987e67c1eb8196002e4cff8a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE