8443357308adb467a390a37355cc9f9e_JaffaCakes118 | Triage

Sharing

General

Target

8443357308adb467a390a37355cc9f9e_JaffaCakes118
Size

466KB
MD5

8443357308adb467a390a37355cc9f9e
SHA1

97544399c564a088602e7f2198fd4c118fea5a9d
SHA256

08080b5d34f53bc279bb89146b54f7867b5b116b408610f1809e5b70306b5ffd
SHA512

dab8e7f1188edd64f1812b94fc49549c26566d6e69b460e19fa06776c9b885781dad9393ea49f9137215e0b03f836bfe5f4c11ebf2bdef0cb7fc480e24d27802
SSDEEP

12288:YPxMtp8j61HiCif/gJ6GZhBeMlyMRkDZ0IOLoR:YPxM38j61cS6GZ9zRk2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8443357308adb467a390a37355cc9f9e_JaffaCakes118

Files

8443357308adb467a390a37355cc9f9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55a606478a96bc80a2a2e3ecc4040eff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
HeapReAlloc
GetTickCount
SetEndOfFile
CloseHandle
HeapAlloc
SetErrorMode
UnhandledExceptionFilter
WriteFile
GetModuleFileNameW
lstrlenA
GetStringTypeA
TlsGetValue
SetStdHandle
VirtualAlloc
ExitProcess
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 453KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ