0b432ec9008077db6038c4feaa912e85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b432ec9008077db6038c4feaa912e85_JaffaCakes118
Size

188KB
MD5

0b432ec9008077db6038c4feaa912e85
SHA1

82bc397dc7f333b07c38afa622f7abd639d95f9d
SHA256

6da3cc1fca8b4fe763905a9ba61dededc6b6555f92a3b37caa04e02ea612fad5
SHA512

74ba2e978320936587c45e50b8ebb498baab29594f7b7b2734caac5724fc051d5572e1ed9bc65dba0674cec270edf7192e897c4043c65ff19295b5185f0c2012
SSDEEP

3072:SY/z+HuEGiIx1aM+jV7fmN5A4J8i1/1ObngnaPzLJ:SgKHuEGiaHCV7EXySnaP3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b432ec9008077db6038c4feaa912e85_JaffaCakes118

Files

0b432ec9008077db6038c4feaa912e85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc4ae123adc649b9bed31a950e2191a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAllocEx
GetACP
IsBadReadPtr
GetLastError
IsBadHugeReadPtr
GetProcAddress
LoadLibraryExA
GetModuleHandleA
ExitProcess
GetCommandLineA
ExitThread
GetCommandLineW

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ