86ecfa7b225260b3bc5ec7398c78fdd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86ecfa7b225260b3bc5ec7398c78fdd7_JaffaCakes118
Size

20KB
MD5

86ecfa7b225260b3bc5ec7398c78fdd7
SHA1

3ebb15c897d276a4100060dc2cf4c3d6d792cc47
SHA256

6c8ca9f9174fdbd9919b639c2adb81162a624c6ed69b2f0096fb3732c7fe0479
SHA512

5ad085866ee61ad6e4804426c5c2c064ab900a305710e40e608793b84c7d39ca98b95937d7f965922bd8a75eaf641eb6949dee5d7a98ee32e8c70e3f6ec1fd00
SSDEEP

48:iyOp7lmm0w8gRIbaVJ4MloKohcNnJc77aRCL5BXA7BbL:Emm0w8gubaVUbhB77a57dL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ecfa7b225260b3bc5ec7398c78fdd7_JaffaCakes118

Files

86ecfa7b225260b3bc5ec7398c78fdd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de86f4360cd9d54537ac8545387de2a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
VirtualAllocEx
GetModuleHandleA
OpenProcess
Sleep
WinExec
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 298B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE