8c6557ba5d97c0d37f0aa7b40959391c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c6557ba5d97c0d37f0aa7b40959391c_JaffaCakes118
Size

119KB
MD5

8c6557ba5d97c0d37f0aa7b40959391c
SHA1

1015e02b098cf8675d12d2bb7c0472cd6be87b0a
SHA256

1a4dddca61461b8a897c82e2f83545c21c5a62ba7e8160bd0c9e807fe650e99a
SHA512

302381fbb3000448a97dc8a97b143d47da6e03fd01bf545b6b2b77bca6b4e21f6e51a002e2e7e53d54b7a8a2dd42f51c35be3cd7331981b76ccce815bcd13409
SSDEEP

3072:yi33z1oEvF3tIEAM4M3Xwfh3POuDwkLzYI:yAj1o+1dp4M38h3P/LF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c6557ba5d97c0d37f0aa7b40959391c_JaffaCakes118

Files

8c6557ba5d97c0d37f0aa7b40959391c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48722e67d4f2f44ee75e863b25c7cf69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

Process32First
LocalAlloc
VirtualProtect
ReadFileEx
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ