0e8d8e151eebd442a3daf109597abdf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e8d8e151eebd442a3daf109597abdf1_JaffaCakes118
Size

30KB
MD5

0e8d8e151eebd442a3daf109597abdf1
SHA1

9dfd37a03c2f7c48e768601a52c2a24f8d5310a3
SHA256

4368685915d1317f1ca064f962e0aad96d5b90f5e1eb7d238d362106af5e38d6
SHA512

6ea8b9180bf0a563c407ed6a138aacfcfc62795240665accecc23e6b759376c6205e36d9001c97c057bf1790f5d601891a5707e6023270be96212ff20e134aa5
SSDEEP

384:t+Ojg3wSNnxpP+KvWSJw/zRwxFaR/YKPaHglUq36rJxo:8OWwSND+TSJuzRwxFaBSHdq36rJxo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e8d8e151eebd442a3daf109597abdf1_JaffaCakes118

Files

0e8d8e151eebd442a3daf109597abdf1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

057c345994cc9a1f44f8060936f7a8bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_exit
_acmdln
__getmainargs
_ftime64
_ecvt
_initterm
_except_handler3
_getch
__p__fmode
memcpy
_XcptFilter
_putws
_adjust_fdiv
wcschr
_wunlink
__setusermatherr
_controlfp
_winver
__p__commode
exit
_pctype
setvbuf

kernel32

GetStartupInfoA
VirtualQueryEx
GetCommandLineW
LCMapStringA
HeapAlloc
IsBadReadPtr
TerminateThread
CreateEventW
TerminateProcess
HeapCreate
GlobalMemoryStatus
GetModuleHandleA
GetEnvironmentVariableA
GlobalAlloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ