0afbd5c118a7c84ae89e296e8b5c23fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0afbd5c118a7c84ae89e296e8b5c23fe_JaffaCakes118
Size

148KB
MD5

0afbd5c118a7c84ae89e296e8b5c23fe
SHA1

a77f7805e4b747b330ed8776080aec284c33df2f
SHA256

aca37693dd4eddbf50b50957e63865aeb6a6efede4e086f0f8d667daea30b347
SHA512

70db08fb1a413add2edaceba1b3fcb60f8f78c13b64927818e7da211445705575efa48657bc4c04d0212ef6aec68fd6736d28734da15ae4d116a25a23fc3d36b
SSDEEP

3072:d4QCKLwF9Z3+MSaJ28hnX17vbuLmyNoCpIEj7sqgOa5DSO/Rf0s:d4KAZlcAX1GFdpbjFg9Jf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0afbd5c118a7c84ae89e296e8b5c23fe_JaffaCakes118

Files

0afbd5c118a7c84ae89e296e8b5c23fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95a76386f00b6365a2b951efe0de18f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExA
CreateEventA
GetConsoleTitleW
TransmitCommChar
GetCommandLineA
EnumCalendarInfoExA
FindFirstFileA
MoveFileA
GetStartupInfoA
GetModuleHandleA
SetSystemTime
GetCurrentProcessId
DeleteFileA
FileTimeToLocalFileTime
UnregisterWaitEx
IsDebuggerPresent

msvcrt

_exit
memcpy
__set_app_type
__getmainargs
_initterm
_XcptFilter
_controlfp
__p__fmode
exit
__setusermatherr
_except_handler3
__p__commode
_adjust_fdiv
_acmdln

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ