0f5ba947ff279edec80321794d821488_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5ba947ff279edec80321794d821488_JaffaCakes118
Size

22KB
MD5

0f5ba947ff279edec80321794d821488
SHA1

5cfbe2392369cc18bd885a5401d62759419d227f
SHA256

13540160522145d7de7fd50c637a9ef5f7af93fbfcf9d6f974b379cfbf043c1a
SHA512

4f593d75b844b4b6d69ea95f714d1487275f20c402ac285f980dbc45ac197fb7c7905510bebf8d1d44f5eb28b0b756f6a0f5119aac11f1b45ab2bf65bae729f7
SSDEEP

384:YE84pri6YMATeEjS8V3TapCDLX0Um5jxCsisZTTobk:YE84pdYMoer8lTLLX0f5lfiyToQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5ba947ff279edec80321794d821488_JaffaCakes118

Files

0f5ba947ff279edec80321794d821488_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39c1c1e133049efbb63f435203cda623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileSize
GetLogicalDrives
GlobalAlloc
GlobalFree
ReadFile
SetErrorMode
SetFilePointer
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ