0d8fadd33c2305fc88d16c37c57d7c69_JaffaCakes118 | Triage

Sharing

General

Target

0d8fadd33c2305fc88d16c37c57d7c69_JaffaCakes118
Size

86KB
MD5

0d8fadd33c2305fc88d16c37c57d7c69
SHA1

531b2483447da8a8d32d30a6022a259248ef4006
SHA256

aa0aa41090b9dd5bb1e7930fa0b086caa761a3626da4d9f3c7771236937ceb4c
SHA512

8693c3ad133273a254b00ea26a25a669b671dbf8c477e0dfc02da4eb50e887551b7aa057896469aa3382e7edaf16721ec50f99a0831e0d923ac0da26e9685c25
SSDEEP

1536:kr5ZczzFnToIf9hjGzqwDT3AM48C39jhKXmiM3LuflC377gC1f:kr5ZczztTBf9NAPYM48C39jhYm1Ec37H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d8fadd33c2305fc88d16c37c57d7c69_JaffaCakes118

Files

0d8fadd33c2305fc88d16c37c57d7c69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3ffb9680e36dc48560fe4beb3f22f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeResource
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
WinExec
GetModuleFileNameA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

__p__commode
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
rand
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ