0ffcc238d631872da6541ec548843e3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ffcc238d631872da6541ec548843e3c_JaffaCakes118
Size

56KB
MD5

0ffcc238d631872da6541ec548843e3c
SHA1

8c04b241ee8b2f670762c52e2d269bb71f476e18
SHA256

a2e5184c34e9d6faa3970aac635dbc7376c63bf4d611772607cc6d82536eed6e
SHA512

de770d87bab7dde899611d12460f2725ba5927f31d854df53517459a3e0e7b1b436bbd7f63fde2971e769c2bea3c2d699f4a1971adae068551287ccfb85d0969
SSDEEP

1536:9SXPx6wzZwynaUmgz32RDGdz2RgvZ2zsg8jlCiSXljVVFf4Uc3IqGSzyiTW4hJD0:XWw0Ep461LJuHq4VBHJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ffcc238d631872da6541ec548843e3c_JaffaCakes118

Files

0ffcc238d631872da6541ec548843e3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3fbec6aa9e42c4d86037a41094e4d3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateIoCompletionPort
SetFileValidData
QueryDosDeviceA
SetThreadIdealProcessor
SetVolumeMountPointA
CreateProcessA
WritePrivateProfileStructW
AddAtomA
OpenFile
SetFileApisToOEM
GetCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE