JaffaCakes118_0c0d20280c10e0d9974a125903dfceb3 | Triage

Sharing

General

Target

JaffaCakes118_0c0d20280c10e0d9974a125903dfceb3
Size

164KB
MD5

0c0d20280c10e0d9974a125903dfceb3
SHA1

a92aba188f4d5500230d9789e17189d6b389d904
SHA256

257ecc779d14a601ec0815b0c033137c9cbe4a450385c0bbdc989549cb41a76b
SHA512

880e11c0a2b3d29638a2d5caef6cef631044a74ba86f46b62f56102fba9942c697c44eec8c5e2bfc11d8a81cd4f0563d6e103445322d908055454a3328b7ea66
SSDEEP

3072:uJFzJVA/H2HlLiPxewbim34iXRSG+sZZDb5f/0T133NV9K1FmH:K1JO/WQdbim3bScZt/g33NnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0c0d20280c10e0d9974a125903dfceb3

Files

JaffaCakes118_0c0d20280c10e0d9974a125903dfceb3
.exe windows:4 windows x86 arch:x86

285f5f80118bb58bd28ec489ebfdd273

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
GetProcAddress
GetDiskFreeSpaceA
lstrlenA
WideCharToMultiByte
lstrcpyA
CloseHandle
CreateProcessA
Sleep
GetSystemDirectoryA
EnumResourceTypesA
FindFirstFileA
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
IsBadReadPtr
GetSystemInfo
GetModuleHandleA
MoveFileExA

gdi32

GetStockObject

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ