0a72f6e623c6c935b777ac49bd8586af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a72f6e623c6c935b777ac49bd8586af_JaffaCakes118
Size

256KB
MD5

0a72f6e623c6c935b777ac49bd8586af
SHA1

bd5a6ae0bcdba300c88a6baf1f389892ddeef05e
SHA256

df76c96e64caf0a009f378c23c0a6b0fd5b0302b55b6fe3ddc77b85b7c0e2a1c
SHA512

f47de97ac15803be9861d9a4e6e9c336412b612d3f251873cbda7519a1c2d829b688a28cbaa72ae5037656945915c6804ab9cbe55977272ebf816bb572a01d12
SSDEEP

6144:acP5Y03HA2pyWy5QCTOnpVN8AOVJ2RYE32DqEVzgu0cI79lL:dpHy5QlfN8FvO2TN0cI799

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a72f6e623c6c935b777ac49bd8586af_JaffaCakes118

Files

0a72f6e623c6c935b777ac49bd8586af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b8ad5536f46ba3e5fc53a095bdeb62d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
EnumResourceNamesA
SetStdHandle
SetConsoleCP
GetStartupInfoA
FindResourceA
HeapAlloc
GetACP
VirtualAlloc
EnumResourceTypesA
GetModuleHandleA
ExitProcess

oleaut32

SysReAllocString
VariantInit
SafeArrayAccessData
SysAllocString
SafeArrayLock

msvcrt

_cgetws
_beep
_cgets
_close
_atoi64
_assert
_cabs
_c_exit
_chgsign
_chdir
_access

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE