0f97eeacdd45685f40f94621298f9580_JaffaCakes118 | Triage

Sharing

General

Target

0f97eeacdd45685f40f94621298f9580_JaffaCakes118
Size

56KB
MD5

0f97eeacdd45685f40f94621298f9580
SHA1

85a624a9932fbecd601e12fea717e9c66487b296
SHA256

0aef4dd692aec637921cf2a815af6afdbe26173a7ce616ee70be44a0a37c98d0
SHA512

dcdc067c027bcc23f67f4df4079d678385355e7a16bfa938a6b60efdaa39ae3ca5ce44db476eaf47200f3ad2e934cfa3f6b9a72459a34d53dbf8ecd245fadfc1
SSDEEP

768:aBLjlt7ZswOV2kCu+RNgnuMH9X9aPYn39tX1Ot1yQ69Z1Z5g/XCW+6lEqwbxNLx+:xGJMBtlOTO1MfEZRNmY99ydQ2u7J6//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f97eeacdd45685f40f94621298f9580_JaffaCakes118

Files

0f97eeacdd45685f40f94621298f9580_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb9516d80249b814989ec325e58544e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GetDiskFreeSpaceExW
EndUpdateResourceW
lstrcat
SetCalendarInfoA
OpenThread
LoadLibraryA
GetConsoleTitleW
SetConsoleActiveScreenBuffer
GetDiskFreeSpaceExA
HeapValidate
GetDefaultCommConfigW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE