0e2ac32bd45045653d7aa8da2e3135e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2ac32bd45045653d7aa8da2e3135e2_JaffaCakes118
Size

220KB
MD5

0e2ac32bd45045653d7aa8da2e3135e2
SHA1

336eb3be193b28b40ec1cd3fe3a4d6991183279e
SHA256

703d9dd49d1688502b8c7bdb410a64e12bade10a1735fd27a227d783f5ff7887
SHA512

eff85cf21c68556b680dadeb31d5a942441e6a6df86fafefd488ac23e9f2c071077e4d87baaf3efd3a8805643b997a5624bd4ad2e8b7b861d9a3380ab9710fdf
SSDEEP

1536:Gmc6q62pG8IKBTxQxN46L2ehYtZgTGFI6iY9vV1FOklC9BSxxbZl99JF:GHhpGFW2xe6CeSfFhr9vfFOklC9BSxx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2ac32bd45045653d7aa8da2e3135e2_JaffaCakes118

Files

0e2ac32bd45045653d7aa8da2e3135e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86057e03f22e7f492f3fdd45c4a17706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
GetModuleHandleA
ExitProcess
GetCommandLineA
WinExec
GetTempPathA
LocalFree
_lclose
_lwrite
LocalAlloc
_lcreat
LockResource
SizeofResource
LoadResource
FindResourceA

user32

CharNextA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ