8c42e9900538c625ee5d1146277e1aa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c42e9900538c625ee5d1146277e1aa1_JaffaCakes118
Size

58KB
MD5

8c42e9900538c625ee5d1146277e1aa1
SHA1

af3bc14cb74e8a0e8f4e880f5051da9628524df8
SHA256

d0fb1f9b3db2d5cf3207a2ce5b680deec0586c49a65cca5e87dbe8ba3d0b7cfc
SHA512

54762cf1301df802694a40ab4c3d2f2aa66f8595c8ccf33e48448c1d10fc48ce35a41da3a310dbce4448e3fcee386167d25f9e3e97befb14d0fce14938820aab
SSDEEP

1536:kr5ZczzFnToIf9hjGzqwDT3AM48C39jhKXm8:kr5ZczztTBf9NAPYM48C39jhYm8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c42e9900538c625ee5d1146277e1aa1_JaffaCakes118

Files

8c42e9900538c625ee5d1146277e1aa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3ffb9680e36dc48560fe4beb3f22f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeResource
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
WinExec
GetModuleFileNameA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

__p__commode
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
rand
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ