b0f4e12303ae08bf8ac3b2d7aa9d4eb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f4e12303ae08bf8ac3b2d7aa9d4eb6_JaffaCakes118
Size

15KB
MD5

b0f4e12303ae08bf8ac3b2d7aa9d4eb6
SHA1

f2a7b9cc0d7f1527b889c41336edbb668f55bb10
SHA256

9768ceaf069c8d21b6cfe1cc58e064e9de919f49220df68a56155d3709db79af
SHA512

9f654c6603a25c81b98fd77639dfce8da0222ff3ecfae874463eeaff5e90b0573e8611c54817ec9ddf8704768e8ba0924d0d37a623648322214e91d270566216
SSDEEP

192:EzfRJCHUc6SfVm/4P1oynjGYpgKnncnnn5pjEnbdGhwPtFWqIrqG33KySg04X9a:Ezf7Cg6Wu114jEY6tFFEoySCz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f4e12303ae08bf8ac3b2d7aa9d4eb6_JaffaCakes118

Files

b0f4e12303ae08bf8ac3b2d7aa9d4eb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ade87d04599d8e19dd1b897fed7f1569

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
GetSystemDirectoryA
MoveFileExA
GetModuleFileNameA
GlobalAlloc
GlobalFree
GetModuleHandleA
GetStartupInfoA

ws2_32

WSCEnumProtocols
WSCInstallProvider
WSCWriteProviderOrder

msvcrt

_acmdln
free
fclose
fwrite
fopen
malloc
strcat
swprintf
wcscpy
memcpy
_exit
_XcptFilter
exit
memcmp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ