0b91c6cd2988d8046310f525e9643a12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b91c6cd2988d8046310f525e9643a12_JaffaCakes118
Size

17KB
MD5

0b91c6cd2988d8046310f525e9643a12
SHA1

c5e2c8c5b543e41b87e0a48ae052b32325fb2e3b
SHA256

51a36683db194f7a7876a66171f9d30b385285d2c78d2ba7032326f7efb3a152
SHA512

4ac322c8d517fa41367bd0278d47641df8ff87cda9c4138620767e1666f3c51b5b784a88c33dfc66c90fb5c7c6ee058fa172b805e66e0c8d28ccc5e47ef2d238
SSDEEP

192:3DJ6gNN0DHgQF4kKmOVEjt3+d6YG4OddCYwLPNQ7kYP5ZZR+FPApU4vZ:1HNN0D7FVOVetuZrR+7kYP5SCU4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b91c6cd2988d8046310f525e9643a12_JaffaCakes118

Files

0b91c6cd2988d8046310f525e9643a12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bde4109a2f72061d53896281f09d85

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uvtcdox
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE