0dcc0bef49a164717d309f5f6e5d6f4a_JaffaCakes118 | Triage

Sharing

General

Target

0dcc0bef49a164717d309f5f6e5d6f4a_JaffaCakes118
Size

5KB
MD5

0dcc0bef49a164717d309f5f6e5d6f4a
SHA1

6d3bdf591b73e40257ef69d894165d0d090079d4
SHA256

521d7bbb01741b0324558f499b7c6abada71619bdfb7d2436c819cbc7fa89f1e
SHA512

5d1ed06d14b0483ea365022e7a3297f52a16c78cdbbb588dd2761082cc1d74e3d5c591819e009333f25f346051a9f3ecb060eca035f0774600c0f285453df3ec
SSDEEP

48:CYVVaDntDlbbBhIi51NB1Yv4N0SqoOe99+BaPtboyl1dv9NCZP:Ipl/BhIg1/1w49d99+BaPtboyndyZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dcc0bef49a164717d309f5f6e5d6f4a_JaffaCakes118

Files

0dcc0bef49a164717d309f5f6e5d6f4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

437965e42c9064514d1be0186a985f15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
GetFileSize
CreateFileA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

realloc
memset
strcmp
_exit
free
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ