0f5e0eb237fa4c9133d894e50f74c2c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5e0eb237fa4c9133d894e50f74c2c0_JaffaCakes118
Size

6KB
MD5

0f5e0eb237fa4c9133d894e50f74c2c0
SHA1

7674c4f5a8ff5cccde31ea4f893d4525daa1e1c9
SHA256

6527f87a0de71f9b44967dba47fe7abed86fc98a3159bcab8b4f320bbe7e2f40
SHA512

801b9b9d9083c9975ccd3ea67ea3130d4a65d4440b6f2ea29c9cb6d35cc27b3a50f6c6729c57678bd46c2116634f5bb9bf0efdb5cedfdf408771a18e4670b149
SSDEEP

24:etGSvM6XsydHaS2xAMoB0Cf8YAEi5IwlEkAUX:6vzXF5aDxAMoB0J9VlERU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5e0eb237fa4c9133d894e50f74c2c0_JaffaCakes118

Files

0f5e0eb237fa4c9133d894e50f74c2c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cc70092f509083da4c8d2ff4578f23d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
WinExec
DeleteFileA

Sections

.text
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE