0e04ebbabcad6ea5604ee4abda3d67f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e04ebbabcad6ea5604ee4abda3d67f2_JaffaCakes118
Size

37KB
MD5

0e04ebbabcad6ea5604ee4abda3d67f2
SHA1

c53a013046016d8a50082eab7077c4048213f118
SHA256

940b1aa476a0b59ea68293bca5be90e3cb0b59dc163299a7561797415c33349f
SHA512

11270ea0cefa5a5fe4e9a3e0cb615ecfa9aa91566de934e1e2fd4032a25f514de2873998354e72cc8eb9f987f57822960679620026f30ffa56225cd85b3a4334
SSDEEP

768:KD8ODmWdQrGImPBfVWB8Cpoi5DW6ITwMxDSH0fmUcn:KTXiWBNU8ioIDWiMRfcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e04ebbabcad6ea5604ee4abda3d67f2_JaffaCakes118

Files

0e04ebbabcad6ea5604ee4abda3d67f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99e1423072f6813a81cd5b4016fe2fda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

PostQuitMessage
GetClassLongA
GetDesktopWindow
LoadCursorA
DefWindowProcA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ