0cad5592d068cb1ba31ce88197bfd072_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cad5592d068cb1ba31ce88197bfd072_JaffaCakes118
Size

83KB
MD5

0cad5592d068cb1ba31ce88197bfd072
SHA1

59f392ecb864f681bdac8a249478e5a3bbf3ebab
SHA256

fe34e3a94eaaddc59b82399b2b49beb84cce9856cec193ecb2a6e0a010177fc3
SHA512

c5a38c91d866041668e6e5d65a411074b40376233117c4bea0f3e2c0081240405e847fe1109878ce185cb989fc8b272234e5503874c803a709607f43fcd887d3
SSDEEP

1536:nhSuqD4fCsVmR3q1u2kWIq6/yJqs1ZZ8ibKpjVrs2ryrd1vUQuq3N:3ww5CyXiHs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cad5592d068cb1ba31ce88197bfd072_JaffaCakes118

Files

0cad5592d068cb1ba31ce88197bfd072_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faa089f7557e50ad76140b39c29325ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
TlsFree
GetEnvironmentVariableA
SetThreadContext
CheckNameLegalDOS8Dot3W
lstrcpyW
RestoreLastError
EnumTimeFormatsW
GetTempFileNameW
GetNumberFormatW
lstrcpyW
GetUserDefaultLCID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE