0c06485cfb2edf351c686060f52bbb23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c06485cfb2edf351c686060f52bbb23_JaffaCakes118
Size

63KB
MD5

0c06485cfb2edf351c686060f52bbb23
SHA1

75f8c64e6ff96da98d23928f70b231e953ccb8bb
SHA256

983fdbe2443ff46be5c45f7723dd61cbe9ca7f0bd5199093d79e4f1b85c05e83
SHA512

5ada711f4b4ca77122cbef310a68af948e25ff31dd67106c8c76738b06f33d868d3876ae70942a418951163acf72c2b684f2105d61c55b22d9ee43bbd6b693e1
SSDEEP

1536:Xl2/fFWeK7kiR7QMqQCxAx0gErbMDNCFyVvQ5tMYiJ:oFWeK97QkCxc0gErA4Fl5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c06485cfb2edf351c686060f52bbb23_JaffaCakes118

Files

0c06485cfb2edf351c686060f52bbb23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcb709520818d16eae3e017e23a9382a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputA
GetModuleHandleExA
EnumerateLocalComputerNamesA
WinExec
DnsHostnameToComputerNameA
FindFirstVolumeA
WriteConsoleInputW
GetTempPathW
GlobalReAlloc
SetEndOfFile
OpenJobObjectW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE