8a9796cf99164fadc37feb662769b684_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a9796cf99164fadc37feb662769b684_JaffaCakes118
Size

57KB
MD5

8a9796cf99164fadc37feb662769b684
SHA1

3fa742cd85b4e244f0876f66e197e125c30ceaf3
SHA256

6314b8ea750ac3bb37bdc6e972c07e40679247e02cbe7f822c3f1b10563ece3c
SHA512

e17ba6090d94cf3f95f55b6740de81c9fc5fc18259e8986674d4b02070fcdda57801ff9b758aed27141eff2ac1aa7de00430ea5dcda3b37cd4b21a1c1d4ea530
SSDEEP

1536:nXy9CoTnwySECVBZOau/9ZUAdaHiu+LSoTnQAkkc:XObnwySECvW9ZUAdaCu+3nQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a9796cf99164fadc37feb662769b684_JaffaCakes118

Files

8a9796cf99164fadc37feb662769b684_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6978c35dbed3e44c5c4c521f3c0dc67c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
DeleteFileW
Sleep

user32

EndDialog
GetDlgItem
IsMenu
DrawIcon

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ