0ccde66f294a8c97344d06e7cf42490b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ccde66f294a8c97344d06e7cf42490b_JaffaCakes118
Size

58KB
MD5

0ccde66f294a8c97344d06e7cf42490b
SHA1

52b9b49549592f0248a8cb4fe2cda3a75ed8b132
SHA256

f5b862aaed6475f3395dabb680bca21ad5ac10815610e584cfd7994a4073eed2
SHA512

87a2ff065dd34f39e4e91077e59d61fe2e3dc98f269cd000da53f18af7b9423cce955cf7a93caa53b83d3b38cc297615f3283573b22c5217b29f0f8176ae794c
SSDEEP

768:LmA4ofiIWlhj5e3cpLIXqZ0mrY5v7RqElr1j18wi1F1aqf2lhu39sbGb:Lf4ofiXlHesJV0mMvINtJf2lhu39Vb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccde66f294a8c97344d06e7cf42490b_JaffaCakes118

Files

0ccde66f294a8c97344d06e7cf42490b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aeea4399c3ff53fc245aaf8419919963

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
CancelTimerQueueTimer
ClearCommBreak
CopyFileA
AddAtomW
FindAtomW
TerminateProcess
FatalExit
GetConsoleCP
SetUnhandledExceptionFilter
GetCurrentThreadId
BeginUpdateResourceW
EnterCriticalSection
Sleep
DeleteCriticalSection
LeaveCriticalSection
CreateMemoryResourceNotification
WideCharToMultiByte
DeactivateActCtx
GetConsoleNlsMode
GetLastError
CloseHandle
CreateMutexW
GetSystemTimeAsFileTime
DeleteTimerQueue
ExitThread
CreateFileW
AllocConsole
ExitProcess

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ