8b463eb2abe445b7dcc4107cf885468f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b463eb2abe445b7dcc4107cf885468f_JaffaCakes118
Size

25KB
MD5

8b463eb2abe445b7dcc4107cf885468f
SHA1

ba1476ca289f813d7e3d4b917fffb35598fa86f7
SHA256

549f6cf5ffb2721bf247c04430b81abd6cdd62d1f09c591fede0d21e9d5aaee9
SHA512

f2702e56e788a8701ea8da29e16c3453f7d94b0dad9049e304ea09e4917764fcb8c33f5cac36062c5df89fbdc2006eed3d92b1d81464d915d9dc66470ad75d4f
SSDEEP

192:2iG3V9rjrl80MZufVg1bV3SVOp+NTCcAilfEgfdBkKA8Sn9RkECabEgxK0L7AIu7:nkVxg2cYO+EUfEkB5A8SXkevPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b463eb2abe445b7dcc4107cf885468f_JaffaCakes118

Files

8b463eb2abe445b7dcc4107cf885468f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a76a8a6597ca14b21c8a61367389b9f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
CreateFileA
ReadFile
WriteFile
GetFileSize
SetFilePointer
SetEndOfFile
DeleteFileA
CloseHandle
WaitForSingleObject
CreateDirectoryA
CreateProcessA
GetThreadContext
WriteProcessMemory
SetThreadContext
ExitProcess
ResumeThread
GetFullPathNameA
VirtualProtect
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCommandLineA

comdlg32

GetOpenFileNameA

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 915B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE