0f5a03fd8ef2cb056ef195b8f0311fd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5a03fd8ef2cb056ef195b8f0311fd4_JaffaCakes118
Size

83KB
MD5

0f5a03fd8ef2cb056ef195b8f0311fd4
SHA1

0137d2452b2afd80228e04ad7ae583c3012f10c9
SHA256

49c2970760d18da04c87855ba37d86f440b34c60eca9c5c5073376ec134a68d3
SHA512

457f2366535ba14eea9129fcfc9a346c8cfd545254a4a60fcf4ec8c0b7e1da154630a897064bce7e62da4f579c71a71f2c6072da277f83f2697765b12fe9ee56
SSDEEP

1536:DHmoKO4IQXQdCdiWooIFMI57s5MAJOKBwvEIDRlv0qLD/jEErxTWDTMqhGKYIZTX:DGoKO4V5diWotd545HgKuvEK/vjBkMqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5a03fd8ef2cb056ef195b8f0311fd4_JaffaCakes118

Files

0f5a03fd8ef2cb056ef195b8f0311fd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7479662ab8d452c8c0f7d6e2a4fcf541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseActCtx
LeaveCriticalSection
_hwrite
DosPathToSessionPathW
OpenProfileUserMapping
CopyFileExA
DecodePointer
SearchPathA
GetCommState
InterlockedExchangeAdd
GetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE