0c807ceafd6a6c3fc58287d11c26df1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c807ceafd6a6c3fc58287d11c26df1a_JaffaCakes118
Size

49KB
MD5

0c807ceafd6a6c3fc58287d11c26df1a
SHA1

b1fe4a4c17aa98d6c65ce66013dd963ea5a9f32f
SHA256

b121bfc7dfb7c4ef7c24f0979522815ad27a55767b930dbfde86558e8c3eaea1
SHA512

d4adb34c5563d8fe418d65fba6369883feb90dd6526cfb9b597213acc03a485e3cf2f87e489cba37637f330aeb49b2e901572f0b253b2160a2bc99d5ed8401a9
SSDEEP

1536:jhM9+wFLLZiSbd1e5gXWTZg2XydwzaCcf:G3LLZheKWTpXyGaCcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c807ceafd6a6c3fc58287d11c26df1a_JaffaCakes118

Files

0c807ceafd6a6c3fc58287d11c26df1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb0486d6b8e3cd9486417575a7404ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
memmove

kernel32

GetModuleFileNameA
lstrlenA
GetTempPathA
GetTempFileNameA
GetStartupInfoA
CreateProcessA
FindResourceA
SizeofResource
LoadResource
LockResource
CreateFileA
WriteFile
CloseHandle
FreeResource
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ