8c37bd4a2d02381b56442be140827bf5_JaffaCakes118 | Triage

Sharing

General

Target

8c37bd4a2d02381b56442be140827bf5_JaffaCakes118
Size

85KB
MD5

8c37bd4a2d02381b56442be140827bf5
SHA1

44aa3edfa2141f4df3ae034891721da0f0e28fc3
SHA256

3e5e2a598e92c8183b058b6519971b74e68afab38fb15b95306a9a07e074bd2b
SHA512

8c40e274167c9a669a1732589554d2d04e2b7a2a6a5b60ea7fdd2b59211c92ba2080622b9e12deb1fefe80a5c2396c67dcbd7d396d18c2a2c7d972aa58e38b89
SSDEEP

1536:bsRzq2fhbp1pl7uMN5GFUUCJHTieoKF34he4Zh6pN50SUYSKTbsywzebTNIj4NY:zt2UCxOeoKFAbO03qCavNDNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c37bd4a2d02381b56442be140827bf5_JaffaCakes118

Files

8c37bd4a2d02381b56442be140827bf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98cdfe854946b2dfeb35f1cad3e0af29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memmove
_isnan
sprintf
_CIexp
_CIlog
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE