0c8c5efadcc210edfa7440af0d5c41c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c8c5efadcc210edfa7440af0d5c41c9_JaffaCakes118
Size

6KB
MD5

0c8c5efadcc210edfa7440af0d5c41c9
SHA1

642db1954b65e8fe81d473a5da8101cea6255cd7
SHA256

bcc7525d2d3ba17e55eec10333698689cc506404af0baf99c5c05b9e4f0954bc
SHA512

3bd173baae8bc0ff7abaab9b6e12309f931b9b0c8fd3452e7ed1f7db2825205d1610d3af00190f4b239d915449a7d38a61def89d9315f7be98b8737c4483708a
SSDEEP

96:jZrJtamMkGhr326WWpLQRZnloF2Ma9VqmRA8fM3CKdja91ezWSA8luPmEl7Nm3/:jZr7amMkGhrRQRZloF2TVqmRA8fGCKdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8c5efadcc210edfa7440af0d5c41c9_JaffaCakes118

Files

0c8c5efadcc210edfa7440af0d5c41c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3b2bd328d06a498978a2f3a0445971c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcatA
CompareStringA
CreateToolhelp32Snapshot
LoadLibraryA
lstrcpyA
PulseEvent
ExitProcess
CreateEventA
Process32First
RtlUnwind

user32

GetDesktopWindow
IsWindow

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE