8a025820f57152eec8f4ff6021d7b4ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a025820f57152eec8f4ff6021d7b4ba_JaffaCakes118
Size

1.1MB
MD5

8a025820f57152eec8f4ff6021d7b4ba
SHA1

dfc3e1f3105c644310e474c623adda307368ecdd
SHA256

2c83d3c4288036b54d81dba9511b89c9bf00c03f148bd8774b18483fbcfa5056
SHA512

688f735f1ef7b38327d8f49a8e27b65a33de0607fa295c39ecea1c30fbbec601f385904a7278562271f1ff30698e8f85ac88d1ff12e7e0b0eceb75d9314a174d
SSDEEP

12288:AsGKnGl7rIGLBMHu5uFCMNIFpb9i2mG1glN0/Lah+2M5ZifOMPRzxDe:AsMl7DBM6uJIFplmLloo4SfOMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a025820f57152eec8f4ff6021d7b4ba_JaffaCakes118

Files

8a025820f57152eec8f4ff6021d7b4ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37a5ea62636cd9cd0638be912b043f6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
GetModuleHandleA
GetCurrentThread
GetCommandLineA
GetLastError
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetVersion
GetUserDefaultLangID
GetModuleHandleW
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
GetTickCount
HeapSize
GetModuleFileNameA
SetEndOfFile
FindFirstFileA
HeapDestroy
WriteFile
FreeLibrary
GetVersionExW
ReadFile
FindClose
WaitForSingleObject
SizeofResource
EnterCriticalSection
GetStartupInfoA

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ