0bd6373b0fe9bb83e007f42a1b29056e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bd6373b0fe9bb83e007f42a1b29056e_JaffaCakes118
Size

47KB
MD5

0bd6373b0fe9bb83e007f42a1b29056e
SHA1

0ba0f6ec390dae5b59efbac3f0c77254ff073cb5
SHA256

b5e974dd32b834b88490860a1e010e9ce194a9fe87f774cbd4b2eb395b081c76
SHA512

b5e4813ec82fa9c77e5075cfda70913befd340f098dcda9ca4a93764779a60b3e4c8d6493eb03e3419db221682a93961263bd305530b419d0c259938f2b489b4
SSDEEP

768:fu7eAwd68fsz3BVXz8J06akCu2uD293JsJPaAODxX7ZX98PDA:futk68fS3BVQ1auD23J0PalV0LA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd6373b0fe9bb83e007f42a1b29056e_JaffaCakes118

Files

0bd6373b0fe9bb83e007f42a1b29056e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c01b0c9ae3a7d37b678b183990c7adc9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ