e8a6912365df6aece96682485acd215d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8a6912365df6aece96682485acd215d_JaffaCakes118
Size

149KB
MD5

e8a6912365df6aece96682485acd215d
SHA1

4182756e3fe911b4592112fd152fb2790c491cf2
SHA256

f6cf63d3140adea408c993d86ca6a2e7758d8267036c33feeaad15b5c89a5442
SHA512

31101a2c1d3620c8a206bf20e4e0f44a0dfbb68284dc4aa87a187e1a9b3a58c422ce5bcd391b2d1cd86bc4f18e0335994c139e32dc3ffa20cef645eade6d4d32
SSDEEP

3072:jP8teEtuKZIaRDdwBk7z8tknOVGU5lD6Xt8qpQuEdWT9nfq16D49dB/xc:D1HKZvv4VkOVtlm9vwu9fq16D41/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8a6912365df6aece96682485acd215d_JaffaCakes118

Files

e8a6912365df6aece96682485acd215d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

124034bdcb9c1b6e9e284c09bbeae9e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
__p__fmode
memcpy

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE