0dcf18bb812bd1beaa53f5daa1f31ba3_JaffaCakes118 | Triage

Sharing

General

Target

0dcf18bb812bd1beaa53f5daa1f31ba3_JaffaCakes118
Size

17KB
MD5

0dcf18bb812bd1beaa53f5daa1f31ba3
SHA1

70212c6f3c3bd10f1db4173cc99df7949869fab4
SHA256

bccd1533ac04fafaec4f68b501e7dab526724bcb6f895a53ede44e63ec254f3b
SHA512

540f516c5c50e7d659daf201bc987b5f23044d82147a91f1426dfb778bd4ec03a0da5bcd9a559331773571f6199d248e4fbd277ca34b01e1cfcfc2f2c928fda4
SSDEEP

384:I8/69rDldtD8VTuL04RdiL9RBsDBzHnASCFuPb:neJ8AosVjiQb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dcf18bb812bd1beaa53f5daa1f31ba3_JaffaCakes118

Files

0dcf18bb812bd1beaa53f5daa1f31ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db277f0791c951abbedd687d9de0fc32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ