0c05a1d57c68ccc55c5cd5b1a1fe3e51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c05a1d57c68ccc55c5cd5b1a1fe3e51_JaffaCakes118
Size

789KB
MD5

0c05a1d57c68ccc55c5cd5b1a1fe3e51
SHA1

c2d526b0b590e9bcd78611b3ae5ae3e6ab6cdfa1
SHA256

b2b59771a95f2ea1d8720edbeb81febe8488130cc02ae25d924cf90cdaa88b7d
SHA512

fb9de77468feac46e74c608aee872f304ec574cbd116340fa3b0b75e42c90c9d28650d0be387019a420bfffc27a5b78e5c315feca7507624c7c91eccbacca354
SSDEEP

24576:NiSEEC6tTPr3ReAa95Lvs1Os6NDGlwKKLVJEMd1Meu:N7TPd4g3gGl5XIqeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c05a1d57c68ccc55c5cd5b1a1fe3e51_JaffaCakes118

Files

0c05a1d57c68ccc55c5cd5b1a1fe3e51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68ce4d0651a89440b0bf3f08824130c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
free
_exit
_XcptFilter
exit
_acmdln
memcpy
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcmp
__getmainargs

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ