8329aff9d46b3a8a599c6f31c18afd09_JaffaCakes118 | Triage

Sharing

General

Target

8329aff9d46b3a8a599c6f31c18afd09_JaffaCakes118
Size

32KB
MD5

8329aff9d46b3a8a599c6f31c18afd09
SHA1

2a2fe7b6a1c64fc3a019f13d40c87c01920b24f5
SHA256

e45480fda98bf0ec122e91fe153e246c5acf3fe09501a25ff367d8e4e3d5bf10
SHA512

c9c40c41a4ffe89cbf7efce419694d563731c7dd3af01e47e714df299f518eae2f234b290d2209e186c7e05548eecb52e1df81f1e5e7770e1d711661ee6c682c
SSDEEP

768:DRDuHGh96+mYAfONjiPZXt8FRRX7zzow28csAt7Yp:xHnABPIFRRrow288c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8329aff9d46b3a8a599c6f31c18afd09_JaffaCakes118

Files

8329aff9d46b3a8a599c6f31c18afd09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8e738cd5959c46742204e925527e4e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlEscapeA

kernel32

CreatePipe
GetStartupInfoA
GetStartupInfoW
ExitProcess
ReadFile
CloseHandle
WriteFile

msvcrt

malloc
free

winmm

mixerOpen

Exports

Exports

cfdsjnwt

Sections

.code
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xnqt
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ