d0cb862daa500693feac3934f886e09f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0cb862daa500693feac3934f886e09f_JaffaCakes118
Size

809KB
MD5

d0cb862daa500693feac3934f886e09f
SHA1

984facfcebfebe9c0ec3973d8168c9cfd569357b
SHA256

54c05742c13c52023ec95fc3c91f840aed5438c25fff7e30ef637cd86831dcf3
SHA512

576e9826488455c4ed38ff196d602d8009957558b3b690284e0ac1e5ba08653f05db61e7aeab19770110b8244504fb82709124e35c562420b5b4b05c6161b329
SSDEEP

12288:LrhoUabOoAhWncAcwhztOV0bZBN7PTnmCqVMVFduNVwuLQ98mhQ+XCbWKWY:/nduhztOViBN7PTmxVMVvufs9tmk0WK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0cb862daa500693feac3934f886e09f_JaffaCakes118

Files

d0cb862daa500693feac3934f886e09f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

602c6d7a81e57943babc476f99ab8bc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
IsBadStringPtrA
MoveFileW
CreateSemaphoreA
GetLastError
GetLogicalDriveStringsA
GetLastError
GetLastError
GetLastError
GetCurrentDirectoryW
VirtualProtectEx
GetLastError
LoadLibraryW
GetModuleHandleA
GetLastError
GetFullPathNameA
GetLastError

onex

OneXAddTLV
OneXUIResponse
OneXQueryStatistics
OneXUpdatePortProfile

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE