0ec0ce44e6ef2a8a503c95d9b214736a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec0ce44e6ef2a8a503c95d9b214736a_JaffaCakes118
Size

23KB
MD5

0ec0ce44e6ef2a8a503c95d9b214736a
SHA1

e950e09242b1b882d050392e589852def47d0cb9
SHA256

ca217176d41cef4c9a681ba86aab58b81888820e37f44d6a490a74667f420b5a
SHA512

42bb571e1e1a904651b80fb8e30f76e5530b6722dd240956c38a8a5a140e72876834eb5a1fbcf1355d5bbda166356d42dfda60c0f64dfc262433d04b82e9cd19
SSDEEP

384:KXu3BLJY4lz0teNh1xq8A3Q+YJTSQHfl7u+3XaUgKcEA/js:H3LhlzceNfxq8AghBHfl7u+rgK1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec0ce44e6ef2a8a503c95d9b214736a_JaffaCakes118

Files

0ec0ce44e6ef2a8a503c95d9b214736a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a876a518e8f4fb80e11ea715af5dd1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetTickCount
FreeLibrary
SetFileAttributesA
SetFilePointer
GetProcAddress
GetVersionExA
SetEvent
OpenEventA
GetStartupInfoA
GetModuleHandleA
CloseHandle
Sleep

user32

CreateWindowExA
RegisterClassA
DefWindowProcA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA

gdi32

GetStockObject

msvcrt

_initterm
_wcsicmp
_controlfp
_except_handler3
sprintf
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_stricmp
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE