0c3fafdbdcf85e9f05a65864b74d7596_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3fafdbdcf85e9f05a65864b74d7596_JaffaCakes118
Size

14KB
MD5

0c3fafdbdcf85e9f05a65864b74d7596
SHA1

513efdd98a42e702ef89dc2f6f65442d4e85d712
SHA256

ed1f68a60b1c56cd6f0569b35b4afc871aa736431b3ba8013341c7f9204802d5
SHA512

ffdb8c86f4d2e114bb1977e752172f1d2379156245120460acb4e06ab085489da36a11767f3e670ce3b1deebd37dd452c2b1e8ddc3b393112d5f608316077d69
SSDEEP

192:hxjJb/sYAaw6vREGxHqxLmbYiF6nADnXDWE64FJ/Yz2HblOi4W2pA9/u1/LJeew5:TlbkJazEoYEXDWWYz2HgRzT/L5wAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3fafdbdcf85e9f05a65864b74d7596_JaffaCakes118

Files

0c3fafdbdcf85e9f05a65864b74d7596_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db277f0791c951abbedd687d9de0fc32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE