0caee871e31ca57209402bfaa1dfc5bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0caee871e31ca57209402bfaa1dfc5bf_JaffaCakes118
Size

35KB
MD5

0caee871e31ca57209402bfaa1dfc5bf
SHA1

dffb066d2852b5dccf598bc8f11038bff5ba5899
SHA256

2902d1f4daf7667f2c90b7a7caba62e3a5879ac19dd2bcc9670ee6e8e9c74938
SHA512

798f9edf91cc1439ccac6e8266ab829759af68a74d55617462bb95456bd33ae50bb01053a9122e0ab5775dea546ed2518f621fc8dc91aed6e998d1c2f51a1596
SSDEEP

768:n2D0qr0XkQOvN0CaATly/dzNwq2wcDWiop2:ngr0zOl0db/derwPiop2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0caee871e31ca57209402bfaa1dfc5bf_JaffaCakes118

Files

0caee871e31ca57209402bfaa1dfc5bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef5c9e4e987ee9f96440f03a1274a887

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
LocalAlloc
LocalFree
CreateFileA
GetFileSize
lstrlenA
WriteFile
GetProcAddress
CloseHandle
ExitProcess
MoveFileExA
GetCurrentProcess
Sleep
CreateEventA
GetComputerNameExA
TerminateProcess
GetSystemDirectoryA
lstrcatA
lstrlenW
LoadLibraryA
OpenEventA
GetModuleFileNameA
lstrcatW
lstrcpyA

shlwapi

StrToIntA

ole32

CLSIDFromString
StringFromCLSID

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

clikjku
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE