0c9c2c38e0294b52e4e93903c40c2bff_JaffaCakes118 | Triage

Sharing

General

Target

0c9c2c38e0294b52e4e93903c40c2bff_JaffaCakes118
Size

89KB
MD5

0c9c2c38e0294b52e4e93903c40c2bff
SHA1

608444a14912cf0e25706b8dfc54168f46868c79
SHA256

a9512929d6ca1b7b131409bb9555eca6dbce7f387870ef1aa4908ecf15a9dd4b
SHA512

22f0c0e645e06ce57daf4c8db46e09fd02c5e40ddd4242b09de3f2f193496a1c3c96321d2367806223867fa1c79ad7a6d3896a8fa185003915e0ba727575ea5d
SSDEEP

1536:OayKL0KlECjCGbs+OuM+GMzUClsl+Rgvxw+N3RdqdYaePYjUxnDC/lkr:OazL1lEXGbs7Mnsl+RMpb16kr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c9c2c38e0294b52e4e93903c40c2bff_JaffaCakes118

Files

0c9c2c38e0294b52e4e93903c40c2bff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eda6d2a0617fa53c189464d65a125a1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LCMapStringW
LCMapStringA
HeapAlloc
TlsAlloc
GetStringTypeA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

ShowCursor
ScreenToClient

gdi32

CancelDC
GetMapMode
CombineTransform

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE