8adc9ada511342be8b6050949f2e1fc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8adc9ada511342be8b6050949f2e1fc1_JaffaCakes118
Size

228KB
MD5

8adc9ada511342be8b6050949f2e1fc1
SHA1

7c5737c9121e77cb0b5b8ed6da2c2094adcc5217
SHA256

06690757cc689cb5d9a4b822206d8e165abe3a5cc7c6098a6776a42811b119fb
SHA512

ec2b1bd20c4841944e76a596623193bf7f5315297d45f2ec7860453ee086da1d89391bcfe2b1fa6033075da1d41e5ceba4268e699dff898acb042aa81bc29dd0
SSDEEP

6144:yyA8rXxIPjR4WcfJCbl0gmk7yU/M/iGjb4:yf8zxwjR4WyAbckAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8adc9ada511342be8b6050949f2e1fc1_JaffaCakes118

Files

8adc9ada511342be8b6050949f2e1fc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb9e457d7ebdf526b773d269cd00470e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

getenv
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
sprintf
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcpy
??2@YAPAXI@Z
atoi
_except_handler3
__setusermatherr
strlen

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetStartupInfoA

user32

DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ