0fdc7f39a8f5ad6228bc23bf20556b76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fdc7f39a8f5ad6228bc23bf20556b76_JaffaCakes118
Size

26KB
MD5

0fdc7f39a8f5ad6228bc23bf20556b76
SHA1

b625834de9dbc6ae775216cbcef256bc5bcd9859
SHA256

33b11035d85b1f28ddbcbb2554776f94e3f8623ff305b686c1a71b9c8724e42b
SHA512

5c66aa3e934a00af925ef3e63dd7f3d3223f49c77c03da55081e29e23a01cf5c72ba2ba6bcb7059cf29ae82eedf92e38323fd753591c22ab56b6f95dd9ecdcb9
SSDEEP

768:LWLC38HHHdAw0QoX32JBk0w4+j51WY4vC:0ogtwUBP+nWYMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fdc7f39a8f5ad6228bc23bf20556b76_JaffaCakes118

Files

0fdc7f39a8f5ad6228bc23bf20556b76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db3b2cd368e42ed217b545ab175dd884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 51B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hehe
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE