8440b77838a963335da2e8155ac13409_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8440b77838a963335da2e8155ac13409_JaffaCakes118
Size

12KB
MD5

8440b77838a963335da2e8155ac13409
SHA1

224a9b0d58752ef5091ec6b560d454efdaaf8cea
SHA256

fe39fdf1f1485c15d17bb536e848970d35258b9875f4cb6a139c761e38fa9191
SHA512

dccd4893664b1633a868cb656c99c0f3a14738eed732741d88b73eed769bf49f9a36b74df73b2ed46e91abe5712c7ed0c69e8119bc779802c0577c09c92ac866
SSDEEP

192:nVn7hE753xReMGDaB73usOEH4PbHNOCbTK0q9:V7CpzVTBO68W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8440b77838a963335da2e8155ac13409_JaffaCakes118

Files

8440b77838a963335da2e8155ac13409_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f07303654f77db48713e1b0f390a06f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenA
WriteFile
GetProcAddress
CloseHandle
HeapFree
GetTickCount
GetProcessHeap
Sleep
lstrcatA
GlobalFree
GetTempFileNameA
LoadLibraryA
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

wsprintfA

netapi32

Netbios

ws2_32

WSAStartup
WSACleanup

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ