0f6e86767b289dce4182c12730812e7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f6e86767b289dce4182c12730812e7d_JaffaCakes118
Size

63KB
MD5

0f6e86767b289dce4182c12730812e7d
SHA1

5c10ec50368ef7cb72df713c19846bba1b1b16fe
SHA256

2acc02d07760e919bb69a6dbae1f9b18d84c9c15d636380cd2f11ee3ba132708
SHA512

7a7369289f94873b3fddee9b1a11b487061e40dabe1ab90c533ae413f43da688e0df913fb1a13287451229b790ae0390ca73ae358332d6f3ec614e50c35b5079
SSDEEP

1536:T7uojdtQQxIn71s4b7yGDJi2k/8aa5kCRzAnaiYg:1tdElt1i50aa5BzAnhYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f6e86767b289dce4182c12730812e7d_JaffaCakes118

Files

0f6e86767b289dce4182c12730812e7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae637ebdd5897aec708148121b73caa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
_lwrite
ResumeThread
OpenEventW
WideCharToMultiByte
GetProcessAffinityMask
SetFileApisToANSI
SetFileValidData
CreateProcessW
SetDllDirectoryA
IsValidLocale
SetFileApisToANSI

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE