0ec6e6b620e751aae3eedf19383aa15d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec6e6b620e751aae3eedf19383aa15d_JaffaCakes118
Size

83KB
MD5

0ec6e6b620e751aae3eedf19383aa15d
SHA1

e6cf5a1c87eba429f97e7788531fca61f43fa106
SHA256

bcff92a97e3ce205d5aa3ca894e755f3673fd6d146a70f9773e36f9d65e13cad
SHA512

4b8c5eb38e877ff44206d5bc580bffddb0f2c5a9875c52bf4a16c955c0fce16ceedece37bee489bf86e5fd8efacc291e3bf32593b9c52187e7db1e717bf07f53
SSDEEP

1536:KVVVVlwUpElngTnH0xGXA3W1I1mJb2pjVrs2ryrd1vUQuqKsw:KVVVVrpERInUxu8PXHs2qm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec6e6b620e751aae3eedf19383aa15d_JaffaCakes118

Files

0ec6e6b620e751aae3eedf19383aa15d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdf1637080ed761b55917c27cb84f603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
GetDiskFreeSpaceExA
SetConsoleCursor
CreateRemoteThread
SetFileApisToANSI
FindFirstFileA
FindFirstFileExW
RemoveLocalAlternateComputerNameW
OpenJobObjectW
SetLocalPrimaryComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE