8a7cc9768603a0d0ab29b54e728ca3bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a7cc9768603a0d0ab29b54e728ca3bc_JaffaCakes118
Size

291KB
MD5

8a7cc9768603a0d0ab29b54e728ca3bc
SHA1

50463f05a16db9d83bfec8c0463abad854e4f202
SHA256

da0e81ddd46b52ae0c1b265fd7908d0d326e0971f98f3e432d4ff7b35c63b88c
SHA512

9c2dedb3e146cfed5a254c3c808e48ef574525d82c489696662fe0516933799d6d5d12998d93806ea86254f0e33bf9d5532376bb66b88afec1340d22e79e99e4
SSDEEP

3072:VHjidIq9TtoimPo1ql00cpAw54giaQIAmsM8pBKt3+aq0NkZe36VHJdMhXtQ:VHjidH9TdP06n54gb5AmKMt/X3GpKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a7cc9768603a0d0ab29b54e728ca3bc_JaffaCakes118

Files

8a7cc9768603a0d0ab29b54e728ca3bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64bc9219a31e011ab17d7969582ff6bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

strcmp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.TEXT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ