0e5aa4dfe798124989f168d28f719f2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5aa4dfe798124989f168d28f719f2c_JaffaCakes118
Size

488KB
MD5

0e5aa4dfe798124989f168d28f719f2c
SHA1

207b88caeda495840448d95975c1f655f22bc170
SHA256

b6e80f53ed76237dd05c50883144d992ed5db46a4ac71b03aad492f996784ab3
SHA512

239c36be0c6338931392e703d96c48e91ba9196ba41013ee2c37e295131ee88d6eb7cda258d17ecf94e78f50551ead2b12eecf75f8fee230d963a70d8f36a220
SSDEEP

12288:grX36pkh4JUUxdyjy7O+CbHM/CDk0O6LUbM5tWT9:KXIO01Ond401LUbM5tO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5aa4dfe798124989f168d28f719f2c_JaffaCakes118

Files

0e5aa4dfe798124989f168d28f719f2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9c80cf5f916e35ca2973c5dcb1f1263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
GetUserDefaultUILanguage
GetCommandLineA

user32

GetOpenClipboardWindow

Sections

.text
Size: 483KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE