d0bb10ac9e20a12c85b1df6fb07607b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0bb10ac9e20a12c85b1df6fb07607b7_JaffaCakes118
Size

168KB
MD5

d0bb10ac9e20a12c85b1df6fb07607b7
SHA1

448be245829d31cf0f7e42f371c56ded22795b2a
SHA256

40b46ca65b65a9536a994487709666b4835333b6d658f1c55a64885d16973c81
SHA512

215dd2d006080f535d03bd6422e83212e1c7265029e96f8262c6d02ebe49421e1ef3afae3b79ea2abfe56c19a00f8caf0c0bb353f59bcb77ae987616e1f534c0
SSDEEP

3072:7O8oc8C80hbxndhqSDiSJlnjmWn/CNMxSqN47ly6GvbL5C9ew:7O/c8CjxndhrBnjmW/CSxxCpyjbL5Bw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bb10ac9e20a12c85b1df6fb07607b7_JaffaCakes118

Files

d0bb10ac9e20a12c85b1df6fb07607b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

^@t8oLpC
Size: - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7E[&$p&O
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

n*(5W92,
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7bXvLZo6
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cmlKiQ$B
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE