0bb08fb007bf62cdec79d853fd37f806_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bb08fb007bf62cdec79d853fd37f806_JaffaCakes118
Size

303KB
MD5

0bb08fb007bf62cdec79d853fd37f806
SHA1

e653541207e7901599c8a29230001238fe24639d
SHA256

4ac4132b1cb33a9629a040a826d7ba90884e1e33d7d0c7da7851c7b52392ccc8
SHA512

05360060ba28df65173249d81744f2f6de0fa59be303bf0e4303918133b69984ea63349bb766008a27b9047162a342dda5bb2fdf9a8d4e126d804136b12093e2
SSDEEP

6144:G9FbxMsAwB442mNFzpKbkYAsVZnem80uZI:Gl/lpzG1B8RI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb08fb007bf62cdec79d853fd37f806_JaffaCakes118

Files

0bb08fb007bf62cdec79d853fd37f806_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fcf57146ab824bb067bf2896f723f7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ