f207f3a4e01926d1d6b901d0d6bd1460_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f207f3a4e01926d1d6b901d0d6bd1460_JaffaCakes118
Size

29KB
MD5

f207f3a4e01926d1d6b901d0d6bd1460
SHA1

a2c215bcb4bc333405aac562078b67441910e2d2
SHA256

0b6417605a8aeff591d2f505639646a17d1902284893ba5a33ebef9ad82dbf98
SHA512

24424d43af49c1ea2f08812914fdb203644c13439ed8ee913bf956fc2405bed705d04e71949a62c713592818aeca76aa08e27b7f99f80c7160173f6142baabb8
SSDEEP

768:eaPW7Yg3y9xMuRAZ+S22d7fPrkfqckhudKA:ea8Yx9+fZH7wfkhuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f207f3a4e01926d1d6b901d0d6bd1460_JaffaCakes118

Files

f207f3a4e01926d1d6b901d0d6bd1460_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1ec8dce401eba16d45a4f1aa06ebd77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualProtect
ExitThread
CreateFileA
WriteFile
CloseHandle

msvcrt

memset
_CIacos
memcmp
_mbsnicmp
_mbsncmp

Sections

.flat
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE