e8f94e2e33dba3f7adcbe66d27ac33e7_JaffaCakes118 | Triage

Sharing

General

Target

e8f94e2e33dba3f7adcbe66d27ac33e7_JaffaCakes118
Size

12KB
MD5

e8f94e2e33dba3f7adcbe66d27ac33e7
SHA1

7279776b6c04dc13b358fde38fd7e2656722a9b8
SHA256

486f067d4d3316dc570e85cd51caba0a15f974223cd4143fbd84e6251d616114
SHA512

f5d2b2e942303df797b664398602ba8848fec979f1a9973968668b16a793eec3deea6747e48d6c927277fdbd68d5233566d9d7871a936c8f461a93d54f116c7e
SSDEEP

192:r+FZwE7ZXyqP2ZMD4UM7N3SJAd8q9lVvUGVBTIQyxmWDckHns:r6ZLXXGUOSJenlpUG3TINPDcg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8f94e2e33dba3f7adcbe66d27ac33e7_JaffaCakes118

Files

e8f94e2e33dba3f7adcbe66d27ac33e7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

cc7fbe362414a04e65fb54657fcf9b89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcstol
wcsspn
_wspawnv
wctomb
strstr

kernel32

PrepareTape
GetTapeParameters
GetCommandLineA
ResumeThread
GetProcessHeap
LoadLibraryA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE