0d04f609dcfbc200676242c2c641c99d_JaffaCakes118 | Triage

Sharing

General

Target

0d04f609dcfbc200676242c2c641c99d_JaffaCakes118
Size

83KB
MD5

0d04f609dcfbc200676242c2c641c99d
SHA1

1905056db595e79898b6601f04f36fabf15758a0
SHA256

b7a6db01545d9e769e09e4536deace6810f42a0975c155ee272aaa04403c80f7
SHA512

3ebad7ae8822ace7b99b7a86860c1848d5920c346a59ba92d1445de9d9860baa0ca25070471a1efd087a7afcbf9d3406f37629645ea3b3e6364b35a9d6a72fd9
SSDEEP

1536:ttikwUvsE4oP4szBh2LLJvnt5/sM9Z1+oFhAOM4lEIDdmS8J0rTyK+YjEErxTWD2:tYUUroPJ1h2VtBLZhMWZDdmS8JK1DjBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d04f609dcfbc200676242c2c641c99d_JaffaCakes118

Files

0d04f609dcfbc200676242c2c641c99d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce13f1fdbd0b751b9e72adf1e9b260b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
DebugBreak
SetFileApisToOEM
ResetEvent
QueryPerformanceFrequency
SetTimerQueueTimer
FormatMessageW
EnumLanguageGroupLocalesA
GetDiskFreeSpaceA
SetErrorMode
SetFileAttributesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE