0a31e16b9b06ae79297cdb90a5e028f6_JaffaCakes118 | Triage

Sharing

General

Target

0a31e16b9b06ae79297cdb90a5e028f6_JaffaCakes118
Size

22KB
MD5

0a31e16b9b06ae79297cdb90a5e028f6
SHA1

829c26539f28522c2e1558691036be5ab999b993
SHA256

f49b7d404ca2c4177662501050c6d3955b789de4fcba48b1ae64177b7ceb671c
SHA512

dee653f10798f8a5c63678c4b08b85c16e1f84eaebba3e26f64dc2372e10b648488bcabbe8abacfd4a7dc7d4aeedd745a40d845664a7202d29456ae9fc12ddad
SSDEEP

192:odwKT7CxGqtCf/JMGxEdvwNkAXKhKR/CK7GPVzT9nl3b0:rKHyGqMyVqO+/PGP10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a31e16b9b06ae79297cdb90a5e028f6_JaffaCakes118

Files

0a31e16b9b06ae79297cdb90a5e028f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d134899b450f2f46638cd42411e5a1df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
CloseHandle
GlobalFree
GetFileSize
GetVersionExA
LocalFree
lstrcatA
lstrcpyA
GetStartupInfoA
LocalAlloc
Sleep
lstrlenA

msvcrt

wcslen
__CxxFrameHandler
_exit
__set_app_type
_acmdln
rand
memmove
wcschr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ