8acc2a974da10bc223d9b6393aacb8e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8acc2a974da10bc223d9b6393aacb8e0_JaffaCakes118
Size

403KB
MD5

8acc2a974da10bc223d9b6393aacb8e0
SHA1

5ef32a541f027c7ae9b147138fcb9cad994f7988
SHA256

cc2e76934fdfd709bb20adf009f318abb61f19d38415149c0b8de94247bd707e
SHA512

f6938190915d646b1c25196b576e4ec88dae5d85779f057fdc8d455f78b8804f0b7ce7c491e49a2be9d8ff5027279360f6f5cd88b600e7d5a55bff865aeddd3f
SSDEEP

12288:haaaaaaaaaaaaaWJvT1/RXfWTxD2Cj7qa9UJEauaxaL8:XPCD2CjPUKauakY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8acc2a974da10bc223d9b6393aacb8e0_JaffaCakes118

Files

8acc2a974da10bc223d9b6393aacb8e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef3a0c6b6b4f845864cd9e2b781d9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
AddAtomA
ExitProcess
ReadFile
SetErrorMode
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

FzSPmHgA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NcUEmpJm
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ