e8f3e48f0d2b31920fb32b41e4201fdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8f3e48f0d2b31920fb32b41e4201fdb_JaffaCakes118
Size

261KB
MD5

e8f3e48f0d2b31920fb32b41e4201fdb
SHA1

c1b9a011a4aa5746752889d461edcfa9969b7030
SHA256

c0b05f24fa43ef2e6a3f9ad51669cd1bc62fb6648f56894ff84ff6f88e67f64b
SHA512

85e3e7a677b1063886c2dfc4b331250e178f4abafc444c681fe9ac40ef12385f9591590c2e1d989961e1f181cdea5f5028df971e9b125ca604c5ac5c39612567
SSDEEP

6144:mUBpoxgvcK5pbkP2inOemiF5pvhNoCP+uYiW9C83U:XBpoxCcgpIMi5XzOPTU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8f3e48f0d2b31920fb32b41e4201fdb_JaffaCakes118

Files

e8f3e48f0d2b31920fb32b41e4201fdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a1307bae795842344439e947bc7a1e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
MultiByteToWideChar
lstrcmp
GetModuleFileNameA
CreateFileA
ReadFile
VirtualAlloc
lstrlen
VirtualFree
GetPrivateProfileStringA
CloseHandle
GetProcAddress
lstrcat
ExitProcess
LoadLibraryA
lstrcpy

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 248KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ