0dfc0bd67f822722a13110709ca2d739_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dfc0bd67f822722a13110709ca2d739_JaffaCakes118
Size

172KB
MD5

0dfc0bd67f822722a13110709ca2d739
SHA1

59d508e708405bbcce01512cf462315224ec87fe
SHA256

55ebced9b1e8be2b3414c6460b8a6140ab4dbd03fcb8c27305ace542b37376ac
SHA512

ef1bbc1a4105733079e23d932cbfc0b56bc61e342a18aa5650243d6883482e63d4616b0240bdbec4b0e479450f6b09d6ff4b8dcd516fcde2998378b0473a5375
SSDEEP

3072:MRvWo247b5aiqHFxVOJyXFv+olKfRkqFwaFqPACJPI2cBGzDFu16LR:MRvWC71rgxVO0XFGoEkqQPACCVmM6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dfc0bd67f822722a13110709ca2d739_JaffaCakes118

Files

0dfc0bd67f822722a13110709ca2d739_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c31296900d9d556da7a18dd800a538e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
SetFilePointer
FreeLibrary
GetOEMCP
WriteConsoleA
GetAtomNameA
WriteFile
HeapSize
GetConsoleOutputCP
UnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
RtlUnwind
GetCurrentProcessId
InitializeCriticalSection
GetTimeFormatA
MultiByteToWideChar
GetACP
EnumResourceNamesA
IsValidCodePage
GetCurrentProcess
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
GetDateFormatA
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
LoadLibraryA
TerminateProcess
SetStdHandle
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 89KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ