8b46bd04c69b91764de32ee607834a3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b46bd04c69b91764de32ee607834a3d_JaffaCakes118
Size

96KB
MD5

8b46bd04c69b91764de32ee607834a3d
SHA1

ba1c15b96a228dc42602ffae6e5603abf23180e6
SHA256

fe94b72ec3d86ece186a955894371d71968fdfb424c1a4065e056ee39841349d
SHA512

1ed5732837bbe84cb8b4bff598840c92ea1cc64efecdf777c6b2a68836037cd4a2ee18424b0af3ab343e57cd6bad15d8c0ec65d2f67805bdc1975ac381ccafcb
SSDEEP

1536:uGHM+A5zWiNA5zWiiLENvASOv2YyTDCy6E/XmA5zWiZZj1H0+zV/OjCHmA5zWid1:DOctcbENvAFxyTZ39coR0+EjCVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b46bd04c69b91764de32ee607834a3d_JaffaCakes118

Files

8b46bd04c69b91764de32ee607834a3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a06a7b2bb5b9e9e40527a54304d77f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetCommandLineA
GlobalFree

user32

DialogBoxParamA
DialogBoxParamW
CloseWindow
CopyImage

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ