0e3c307e75f2956fd96031d8517d152b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3c307e75f2956fd96031d8517d152b_JaffaCakes118
Size

56KB
MD5

0e3c307e75f2956fd96031d8517d152b
SHA1

c969bef0ea63bf4feb5a88a22fd0d1cf25240d93
SHA256

119b2f2b628575e51e5cab2ab4ae8ce6bfb5b20ad79f6591e2017b39120cebff
SHA512

0ff931300ba91b6617ca2465f4a3ca0f935d808d129542031d52d37f7837d64effeef6d20276620e5f90d793e7612d9d54cef452f931f1e1006fba679cb1398e
SSDEEP

1536:attttjal9SkFSohjP1Y8WfwoxLEzQQiAVhJ8fN:iafSkRBNboxQ8AVb8fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3c307e75f2956fd96031d8517d152b_JaffaCakes118

Files

0e3c307e75f2956fd96031d8517d152b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1da4c7f5fc4d22c4516b154c9af9a27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessInJob
QueueUserWorkItem
lstrcmpiW
GetCurrentProcessId
SetComputerNameA
SetWaitableTimer
SetConsoleTitleA
TransmitCommChar
GetFileTime
SetThreadPriorityBoost
VirtualFreeEx
lstrlenW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE