8a388c218876066551478c4d32363abf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a388c218876066551478c4d32363abf_JaffaCakes118
Size

29KB
MD5

8a388c218876066551478c4d32363abf
SHA1

167d9d6642420318a9935e4c27938db6c9a06b95
SHA256

6b87abfef9d6037cfe4a98cc7e668edb5f95e11bd28c1ab2afedb3ecbcf0279e
SHA512

3bd51f560119065cb0d3fe345d3be72fbd8d119ea790a3e1a948bf87a3daf69c9b1e5412a2cd70bad2185b1c71038f8349ae8588686673c57d48a32430b87a34
SSDEEP

384:ry6yqg9C/mpwTGS1AFJhdK6g0j1fFHDGy8f0FwgLJ1WCORWjh:rOq0vqGaAJw6hDFDFJJZOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a388c218876066551478c4d32363abf_JaffaCakes118

Files

8a388c218876066551478c4d32363abf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3c9f92c133836b52f8474307eda596d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcatA
GetVersionExA
WriteFile
lstrlenA
lstrcpyA
GetModuleFileNameA
MoveFileExA
MoveFileA
GetTickCount
DeleteFileA
GetLastError
ReadFile
SetFilePointer
SetFileTime
GetFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ