8c66dd2fad3da562c3bc840888052eb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c66dd2fad3da562c3bc840888052eb4_JaffaCakes118
Size

168KB
MD5

8c66dd2fad3da562c3bc840888052eb4
SHA1

bbf4d62f63b921deed36b31e8e4c60c20c7e4ce6
SHA256

b8abaa5836771ca323fbc8fd40299112843b2c4f198fafd9c8398407c465a591
SHA512

3435377a13f7e2676856f8a7b52b18edd7940f55372a97e7d9f9702444ac80b2b90c32e17ea96557f9a0af0782ee71e3aab6006e01df1c6d785d8b22c1ca657d
SSDEEP

3072:cn6sWH2EkUvAkXCS4LXSG+pNaDK418bH4zTjIRXCJUsyiscx4AM:cn6s3q+XSG+N7yfcgUFisy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c66dd2fad3da562c3bc840888052eb4_JaffaCakes118

Files

8c66dd2fad3da562c3bc840888052eb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0a551e3d3e05e79be073ca3e259bcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetStdHandle
CreateMutexA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

shlwapi

PathGetDriveNumberA

msi

ord204

msvcrt

_XcptFilter
_cexit
exit
_exit
__getmainargs
_initterm
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
__setusermatherr
_acmdln

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ