0c324293bc5f151532d9fc512d99cc48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c324293bc5f151532d9fc512d99cc48_JaffaCakes118
Size

282KB
MD5

0c324293bc5f151532d9fc512d99cc48
SHA1

30decea2826317cd750ac11b34be40cf4ae4f8c3
SHA256

06344c5446e07b2cfb5b1958209c69079756c37656332c354bfbabe657796927
SHA512

51d22dfb233285be504ca42d8e7e06289df0dfc80bb8f4a4c0c3403af7a044412ff8b057b763fbc3d831f665f23eb817acfb42f87ceddcdaad610efa633d30d3
SSDEEP

6144:m8cC4587qDgAuGZZAtvux9xjRqu5GjKFva+VEDQOGy:ml587qcAuGZukTVva+CDQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c324293bc5f151532d9fc512d99cc48_JaffaCakes118

Files

0c324293bc5f151532d9fc512d99cc48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98369abdbf1057ab6fb55fb5789ecf40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrlenA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcmpA
ExitProcess
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
SetFileAttributesA
lstrcatA
GetEnvironmentVariableA
Sleep

Sections

.text
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE