8b43e7179a3c1c1b0f7fec5745a96c9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b43e7179a3c1c1b0f7fec5745a96c9e_JaffaCakes118
Size

37KB
MD5

8b43e7179a3c1c1b0f7fec5745a96c9e
SHA1

d8dcd7f99b00eb9f0549e49eb89d2fb3eba6ca24
SHA256

92f5851f87b5a78e650f5e89a589c7828c76b717b0964f6375dd6bfb08311ebd
SHA512

01cf6773df92fff14c02522a13e36455939020ee459ff615db7c04dcfe6e302af1c42206b2f191cdc12b7ee378e39b98464003b28ee74abf8476b1e1e0065737
SSDEEP

768:2bTELrk7O4aM2eo2BxdhJzPImLLRHSjIvXhLNgBJUEbl7e5n:2ArkTbphxRBhHRvpNgwEle

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b43e7179a3c1c1b0f7fec5745a96c9e_JaffaCakes118

Files

8b43e7179a3c1c1b0f7fec5745a96c9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea8c697f3b015e3102236ad450b27799

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

OpenFile
FindAtomA
WriteFile

user32

EndDialog
GetMenu

comctl32

ImageList_LoadImageW
ImageList_Destroy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 55KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 395B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 165B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ