8615cd6907e74f05275c8e5c3dc9a0fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8615cd6907e74f05275c8e5c3dc9a0fe_JaffaCakes118
Size

228KB
MD5

8615cd6907e74f05275c8e5c3dc9a0fe
SHA1

79ea4fa379d05023e81f9ab8a47498c8f91b49e1
SHA256

ef68bda0f6d545492cd289951cffa512332f5837ec1f70a4b94c41287a03608e
SHA512

dc26759b255250e0ae370f9595c51c7763fa4de4a09c5580b350b22981af3f5b54e48f0848244a40992a4c22cc63d1fae54566b859dde21127d48b1d222ecbbf
SSDEEP

6144:X06ZcjjbxLKVMZO/A6nXsrSkT8ThWVAEFcEvBras:XNUjbx86h0crA6vNP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8615cd6907e74f05275c8e5c3dc9a0fe_JaffaCakes118

Files

8615cd6907e74f05275c8e5c3dc9a0fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

777a846e8ad145903c185a138e313165

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
LoadLibraryA
GetCurrentThread
WriteConsoleW
lstrcmpiA
lstrlenA
GetModuleHandleA
GetStartupInfoA

msvcrt

fwrite
fputs
fseek
fopen
memcmp
gmtime
_exit
fclose
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
atoi
_XcptFilter

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ