e8b7158fb7331ce00935fd4c0b0f3eab_JaffaCakes118 | Triage

Sharing

General

Target

e8b7158fb7331ce00935fd4c0b0f3eab_JaffaCakes118
Size

1.3MB
MD5

e8b7158fb7331ce00935fd4c0b0f3eab
SHA1

d8748c14878034fc85ff420692b9bae8d76e934e
SHA256

d5bdb0a4b5e4304eb4b1f02a1eb0d6423923ee406490f6f43e18d3f855bafc53
SHA512

902a510024cc126a699682e89d8c30f5124fc513a51c559bad5dd01e579b7d15c869b95323a4dcc22c648833a2ff5b4a52cc8863040181b184cd576dbbdf7ed9
SSDEEP

24576:u6NwiWbrcfumQDEbU27gPVgbgEZy+DQ/4koszTMUreJfQEEw:u9rIumQDyU27gPVOgE4p4kosLw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b7158fb7331ce00935fd4c0b0f3eab_JaffaCakes118

Files

e8b7158fb7331ce00935fd4c0b0f3eab_JaffaCakes118
.exe windows:4 windows x64 arch:x64

e011cf8334eac9f5babb1d0590d063f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle

msvcrt

__C_specific_handler

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ