e8fc098866162fc3f2c3d26af82aa8c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8fc098866162fc3f2c3d26af82aa8c6_JaffaCakes118
Size

119KB
MD5

e8fc098866162fc3f2c3d26af82aa8c6
SHA1

95074f72f0114dfb09af1a52b299440667817e84
SHA256

86323ec23f8ce0df57f5f18f45f2881ed2da1c3f885af3511926d93e07dd62c8
SHA512

ff777e1eabe71518993859cb022cc1762477e7222c039170d4c670d844cbd6b5983706783d102e4aac5e88c9f6236ae40d1828f3ba7ed27cca1ab5baaed004db
SSDEEP

3072:he3eDfeYmyY55+CE7/KkJOqiKFIvbhb/dXQSa+Ekq:hyeDYZET5wKFAziT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8fc098866162fc3f2c3d26af82aa8c6_JaffaCakes118

Files

e8fc098866162fc3f2c3d26af82aa8c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4501f0f4bcc646a898d54d563cbe3707

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PostMessageA
IsChild

Exports

Exports

Lvmxsxasgd
Oqcushljuno

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enewdat
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ