0c10ea47d11929df46287e07e5f786ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c10ea47d11929df46287e07e5f786ed_JaffaCakes118
Size

17KB
MD5

0c10ea47d11929df46287e07e5f786ed
SHA1

85ceed40f5f9e3cb2eb9b5cab182d39b1f68a7de
SHA256

da19685c4f2eb6a1f6627210bb39e3fd5ede0d0fb2a0a0bc5a058409b5a14105
SHA512

2e4cefad3ba14c92fd238f9827f526004746bbac039a20cb41ea878fc9b79069cf8fb2a31f26d9d9ac8c88da06b0c721c37f66f84465788aeadd8a044795742a
SSDEEP

96:Srn54d9SLbFL64qG9Hyn+kaKVnHPtboynu+U9e9yrZTq/3:65w9SLhL6zgTXOP1oynu+IA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c10ea47d11929df46287e07e5f786ed_JaffaCakes118

Files

0c10ea47d11929df46287e07e5f786ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fc78d511cc838a8cc65ebe22781e740

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
strstr
strrchr
memset
strlen
strchr
strcat
strcpy
fopen
fprintf
fclose
__setusermatherr

kernel32

GetStartupInfoA
GetModuleHandleA
SetCurrentDirectoryA
CreateProcessA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE