8af77b7097ac40aabd49b4798d131081_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8af77b7097ac40aabd49b4798d131081_JaffaCakes118
Size

17KB
MD5

8af77b7097ac40aabd49b4798d131081
SHA1

59ef9f16846d06dbfc629984b71c49ae390a04a2
SHA256

5994d689124bd17125b1f5f931a068c779027093c1f7743b8b0071bfcba8fdcb
SHA512

fda8a26a13bd0d33f8149a00a26112c12c090f2d158412e42bdb509e3017195432fda8a9987b8fb700b1f43c56d82f3a758fb2ebe578d488fa05948ca3602021
SSDEEP

384:uyqQZixDaoHxn1MIY+ihKikY7+NnO4S7QSSjhI7oCYUg:uyZIDaoHx1ML+ihtk00O4VnjhOoCYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af77b7097ac40aabd49b4798d131081_JaffaCakes118

Files

8af77b7097ac40aabd49b4798d131081_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acec3e843af24ca9863b5e18f3da52ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindFirstFileA
FindResourceA
FreeLibrary
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTempFileNameA
GetTempPathA
GetTickCount
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
ReadFile
SetFileAttributesA
SizeofResource
WinExec
WriteFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ