8c56f5acce8b534b3b34f73c9e4d46d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c56f5acce8b534b3b34f73c9e4d46d8_JaffaCakes118
Size

520KB
MD5

8c56f5acce8b534b3b34f73c9e4d46d8
SHA1

5a46823c9fecd3deda783124b545d5ff849d56e8
SHA256

c90576131b13d9deb846b74fb3dc356e7526dcf5806408b65710e54156f75643
SHA512

fb26545f3b3e5447ca714c220ece139e627929664f74f5e6753abe419fe482ca3cc3b887d945418718003934ab12975e5074ce76e9d9aa352c7c49590381c225
SSDEEP

12288:qVIulk0tVcKcEIs32+WzPHoHn98D2Ub4alQpVdVUyFU:qVRlk0oKc+iPWnyrDSOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c56f5acce8b534b3b34f73c9e4d46d8_JaffaCakes118

Files

8c56f5acce8b534b3b34f73c9e4d46d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fe2c01cf9e5451837429f4b541e7a80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
LoadLibraryA
GetCommandLineA
FreeEnvironmentStringsW
HeapSize
FindFirstFileA
TlsGetValue
GetConsoleCP
GetLastError
HeapCreate
SetFilePointer
DeleteCriticalSection
FreeEnvironmentStringsA
HeapAlloc
GetProcessHeap
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ