0c1d29e1873041a6eb807f7c7411eb65_JaffaCakes118 | Triage

Sharing

General

Target

0c1d29e1873041a6eb807f7c7411eb65_JaffaCakes118
Size

46KB
MD5

0c1d29e1873041a6eb807f7c7411eb65
SHA1

58a7c0235eca2dc4fa1f7e7f8b56822680ba54bc
SHA256

f36d06963e44514af8913c06cf89abc8083e3a2d6aa0baf01f05c89f7f76dcdf
SHA512

792441296ddf85e2acf0ff6ee8eb3996c97bcfacada0e15d3061d7ae89cb0dc6eb74107bc2cdd2a469da4f88f078b4c328df44d2a5c3e63725486d9dea1328a9
SSDEEP

768:Ay3CcjkWyuaMGCGTpS8UXINyYLN4uRB7ig:AICskzuaMD7VFO+CB7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1d29e1873041a6eb807f7c7411eb65_JaffaCakes118

Files

0c1d29e1873041a6eb807f7c7411eb65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a590b6d8b44e88e4690b275a36e5676f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

ExitProcess
SetFilePointer
ReadFile
GetProcAddress
CloseHandle
CreateFileA
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ