0f5ef67837630694ab4d283bb3d47e60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5ef67837630694ab4d283bb3d47e60_JaffaCakes118
Size

19KB
MD5

0f5ef67837630694ab4d283bb3d47e60
SHA1

d492e66b1789972f40f98ae35817c5195d6729bf
SHA256

62317978e2896af863ac4f053b89d25389736d52b0a5229cf66858f741603bfa
SHA512

39b6ccaf8115e068c2c4bd3886482b8568ec100e2051ec3ef4bec09411ae8e7cd6993be0d6bb0eba4250a32a8110e9e4e29573e3e8ca354bbebf3e558b8c1a75
SSDEEP

384:TvukYkL4xrtdU8n6nhIOmmTyUUXtQLnm9PJwbuIJyGhomUuWWTPF:KZkQtdU8n6h3eUUXmy9PJwjC5uWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5ef67837630694ab4d283bb3d47e60_JaffaCakes118

Files

0f5ef67837630694ab4d283bb3d47e60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

446e67066768257b0ebfa7c0abbe037b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
LocalAlloc
SetUnhandledExceptionFilter
lstrcatA
lstrcpyA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_atoi64
_cexit
_i64toa
_iob
_onexit
_setmode
_ultoa
atexit
signal

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 92B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE