8398f1b878b798aa2669b1e0a515abf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8398f1b878b798aa2669b1e0a515abf1_JaffaCakes118
Size

527KB
MD5

8398f1b878b798aa2669b1e0a515abf1
SHA1

acc906b371225a426f33ce34839360e00999a181
SHA256

d7defacb09af40b11da50aaaa3583d25e6bca43b91b30a3ddcb74ec6ba1948c8
SHA512

3376fbd6492255609243852e7571729a8d70b2c394e768a68c143401a88b7bc4e334d88562d6f225569163b44595871a43fd7bfa023f6fb774586315744755e6
SSDEEP

6144:mlK2d/HsbMiJ0nIgK54IQzeeeL4/QZ54IQzeeeL4/Q:mlKE9IgKKM4YZKM4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8398f1b878b798aa2669b1e0a515abf1_JaffaCakes118

Files

8398f1b878b798aa2669b1e0a515abf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE