0a1173cb029f14d8313eea6ef60695ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1173cb029f14d8313eea6ef60695ce_JaffaCakes118
Size

56KB
MD5

0a1173cb029f14d8313eea6ef60695ce
SHA1

014067ada13f894511fc1c53805cb08d1b55840d
SHA256

0003afe5d1230d89939ed8387e5a6eee017a7c15fa9569764bd83838b639e8fb
SHA512

b5fb0f6467418e964801775aab4ca2d3937131d828c0307ef6480a338ee99bc49a8efabc0d8c2b1fd01dfa455516b984c0301d69dec1934d4b7cdaff6509506d
SSDEEP

1536:l6PHSFJZy70rpSOP7LR5y9Sl9xvSoja8aDDIt+sb:lqSJSOjLRM9SPZvjatHgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1173cb029f14d8313eea6ef60695ce_JaffaCakes118

Files

0a1173cb029f14d8313eea6ef60695ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5594057a5b6a2729f903ef23dbe1e7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapWalk
SetVolumeLabelA
HeapWalk
SetConsoleIcon
SetConsoleOS2OemFormat
FindActCtxSectionGuid
LocalReAlloc
GlobalMemoryStatus
UnregisterConsoleIME
GetSystemWindowsDirectoryA
SetVolumeLabelW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE