8ae79f401537293235b62f2df31eaf3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ae79f401537293235b62f2df31eaf3c_JaffaCakes118
Size

77KB
MD5

8ae79f401537293235b62f2df31eaf3c
SHA1

34dccededde7025b037d768cc9569a59e0594c56
SHA256

999be6803a6ab7265290c45b60b785b9560d7eda58f4856ad8a2c84d073426e3
SHA512

0ca2625dbbd1bc79630f670d900355b5f11f9fcff8243f03c92be8f5eedbdce71a0837b698c11205dfabfb5c48457a2dcee377ee95b134f8cfc8452cf77791d1
SSDEEP

1536:fkwiB6xzzBSWZZIhVx18uO6JpjGVbS6uo1mY3+C9:cdB6Py38+xG46uo1WC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ae79f401537293235b62f2df31eaf3c_JaffaCakes118

Files

8ae79f401537293235b62f2df31eaf3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5b45cb1a7027f413eaaf091e1225a89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fseek
_initterm
fclose
fopen
_onexit
fwrite
sin
__set_app_type
_adjust_fdiv
__getmainargs
printf
malloc
_XcptFilter
strcmp
exit
fread
_except_handler3
free
__setusermatherr
_exit
_acmdln
strlen

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ