0cbec55fb005729ba65c76e10e6d5116_JaffaCakes118 | Triage

Sharing

General

Target

0cbec55fb005729ba65c76e10e6d5116_JaffaCakes118
Size

24KB
MD5

0cbec55fb005729ba65c76e10e6d5116
SHA1

298907371e5642f3a25bad662808cd1685129f47
SHA256

12dfc3eb242eb8f8d38ba88ccda662095e1927d034b1c27e98ee937349c2320f
SHA512

a98a6d68af8cee3f4a5928c4faab7ec134910fea8e0f19b43688e71cca759f321fc287a84f2d2930405c66c8c149f3978e235d45157039a137fc15bd1126cb07
SSDEEP

384:6PL94JhWDbCW/8AoWz8AoW22lpaQFxH/f4kVdjaLacmkC0GJsJxXSdqWxDEWl:oChWDboAmAMAaQFxfftjaLacmkLGK+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbec55fb005729ba65c76e10e6d5116_JaffaCakes118

Files

0cbec55fb005729ba65c76e10e6d5116_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13c956d8314201a9840987db38751607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
DeleteFileA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ