0f3102a9991cbe62222985e9d7a161b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f3102a9991cbe62222985e9d7a161b8_JaffaCakes118
Size

6KB
MD5

0f3102a9991cbe62222985e9d7a161b8
SHA1

44052bc4cb5d6ca27906f0077390fe2952af80bb
SHA256

72d568b0646f6fbca51ab1da303a8bd06bd7208213e7b6efedd126aef2e53bc1
SHA512

70f4e6387f5996d7d04abd784fa53f2ae4ec065ae586cfe226bb69b9c41d676af83697eda5a577e602ac48f226f9c158124d7f191f96b347d7fb2feb6aab44e6
SSDEEP

96:Z1FfIV+YXfrD3/BwQRyIiKBjPV3FpfJt8UE5g/2jg8:9IV+YjmoyINN1pfb8Rmujg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3102a9991cbe62222985e9d7a161b8_JaffaCakes118

Files

0f3102a9991cbe62222985e9d7a161b8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b6ce1750a46fca9531951d44bb6be3ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
SearchPathA
SetComputerNameA
SetConsoleInputExeNameA
SetConsoleTitleA
UnmapViewOfFile
VirtualAlloc
VirtualFree

ole32

CoSetCancelObject
CoSetState

user32

LoadIconA
LoadKeyboardLayoutA
LoadMenuA
LoadMenuIndirectA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ