8a080d575e51fee8458d06caeac5efb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a080d575e51fee8458d06caeac5efb6_JaffaCakes118
Size

62KB
MD5

8a080d575e51fee8458d06caeac5efb6
SHA1

5df55a21022356c7217567973e77772724e55728
SHA256

a42d17b3eacdc36903fb8c66424354f59b01f4bba1b89a26c7c8e3d509a4458f
SHA512

4bb54007e0b1de5b9f62fd6b8572326244350bafbb7dca418382b2d2509b19a9b47687d18f299c5f92774a5f4394fe39c817ec447f2f79d811b7a36dffa613a6
SSDEEP

1536:YC++zg1AAXsX79VV2WTQfke0Is7p8HWI:y+M167vV2WEbVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a080d575e51fee8458d06caeac5efb6_JaffaCakes118

Files

8a080d575e51fee8458d06caeac5efb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

741ee4850b1d3c51013b79d82b988c18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
memset
memcpy

kernel32

IsBadReadPtr
GetModuleHandleA
DeleteFileA
ExitProcess
Sleep
GetModuleFileNameA
ExpandEnvironmentStringsA
GetFileAttributesA
GetStartupInfoA
CreateProcessA
VirtualAllocEx
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
CloseHandle
VirtualAlloc
LoadLibraryA
LocalFree
LocalAlloc
VirtualFree
GetProcAddress

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE