8b02ee7e0bfaece712e8cadafd3f310d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b02ee7e0bfaece712e8cadafd3f310d_JaffaCakes118
Size

10KB
MD5

8b02ee7e0bfaece712e8cadafd3f310d
SHA1

dfb43719a47d4dfb5f22611bf56ed768c3f8c493
SHA256

e9cd730a313cbd6ec85c69e62a896a8b6af5e747f95a94a50a64c7628baf11e3
SHA512

fc070e9349b793c20f1f7027f349f3b161b4b67a03a72c170d43d4fd29070cffd1f11fbee998b11a1d8b08fdcdccb9d128c986d282fdc244ffd24ad51604b063
SSDEEP

192:YON5/HqqqrLj9sIGAPHY68d0IwOZ21FwRylVPHBNcb/zIUAO/v:YO/mZb/qPzIUAuv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b02ee7e0bfaece712e8cadafd3f310d_JaffaCakes118

Files

8b02ee7e0bfaece712e8cadafd3f310d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1afb9401b257b4366407bc417f4fdb5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
CreateProcessA
WaitForSingleObject
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
CloseHandle
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
WinExec

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE