0df13cbf9e63f9612d28b84d6ef80a26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df13cbf9e63f9612d28b84d6ef80a26_JaffaCakes118
Size

56KB
MD5

0df13cbf9e63f9612d28b84d6ef80a26
SHA1

7db2063268898a255050891c49cb1cfeae17ea6e
SHA256

b1d05668780217e72bb385171dd30c21e3513f0946ca30e26de7d749863f1336
SHA512

ffce5c504a5a3f3429a8649d0d1a0a2f98e4c05c32339bf1ed854a00558628e7f9a181133acec0a767132d2a62dd707f56cb2d8b33e5388bddb08dd693d86dec
SSDEEP

768:Oni4dgoVWUzvfpHge3ntlW3D2jN94HM/hYVXXVMOvtmdH0o6B9sAquOd9QF+/q17:eb3ny3Y66BYgxK9dOd64KxX/x9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df13cbf9e63f9612d28b84d6ef80a26_JaffaCakes118

Files

0df13cbf9e63f9612d28b84d6ef80a26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b58c996608eefe6e40cd5ed59722c677

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
ShowConsoleCursor
OpenFileMappingW
ExpungeConsoleCommandHistoryW
CreateFileA
DeleteVolumeMountPointW
CompareStringW
Heap32Next
SetProcessShutdownParameters
EnumCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE