0cb2ea5e01f291bb1683ae3c2d498f90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb2ea5e01f291bb1683ae3c2d498f90_JaffaCakes118
Size

5KB
MD5

0cb2ea5e01f291bb1683ae3c2d498f90
SHA1

7cc60af23b6a001088c798a942209a316acfee61
SHA256

3e11725e904d0e374b4aaa2edb5a08454765eb6527133b0ac997291a04a17b97
SHA512

745f50c2b800475b9073e9b4f465532c0a9da89a5d32e634ac507d02a4ffe5dd65d739128c1baa3cbaf85d276387de201d9042158369e097705dd6539be9bbe1
SSDEEP

96:ItRJHVdSqpaiSdENebY4kYGHZUxFqGPtboyGIZEiu:sRttpHveLwGP1oyGQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb2ea5e01f291bb1683ae3c2d498f90_JaffaCakes118

Files

0cb2ea5e01f291bb1683ae3c2d498f90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a34852adc905f2e2c3447cb60122ff42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LockResource
LoadResource
GetModuleFileNameA
FindResourceA
CreateMutexA
OpenMutexA
GetModuleHandleA
GetProcAddress
SizeofResource
GetStartupInfoA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA

msvcrt

??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ