0cdf2bfd0c1037153a0a83cd4c6835b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cdf2bfd0c1037153a0a83cd4c6835b4_JaffaCakes118
Size

47KB
MD5

0cdf2bfd0c1037153a0a83cd4c6835b4
SHA1

f5463aa520e67e3aad9c213a276331d503ae9bfc
SHA256

681a9e3b95a1690b39c91cfd432a9478ff8c7c6172274cbfa4f1050ea2a42a20
SHA512

5767b8df39819571a3af75412507bfa372a543546eb2b2465ac8d886b2ed16bd89a601a7ae5707166331f80e3f4124f53783c8d72ab4408aab9d85c472041deb
SSDEEP

384:LtUCzFEcGzOjY22z+95zKZQ7xp63Ar85MxiJ6J9UqPtPWLx4NwyReACapZdy:yigyjYj+9/rDrcMxB3PtPWiNwyvCu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cdf2bfd0c1037153a0a83cd4c6835b4_JaffaCakes118

Files

0cdf2bfd0c1037153a0a83cd4c6835b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e2c1d4c72aa2252d14a9fdf25e1cd58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

WaitForSingleObject
CloseHandle
WriteFile
CreateFileA
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
lstrcmpiA
HeapAlloc
HeapFree
GetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
lstrlenA
GetProcAddress

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE