8bebe611e74e22318891bd6f38069403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bebe611e74e22318891bd6f38069403_JaffaCakes118
Size

180KB
MD5

8bebe611e74e22318891bd6f38069403
SHA1

34265ba58676adf8c8bc83d3eb2cf019d85fec22
SHA256

c768c6509ab226a005f887b4445d8e7d6dcd766eebb438251c9fdc392c22f746
SHA512

afa2960822ab90264102d32b3b24cc7a6738e5194ff72b1f2295c0b1e75c7426c1ecf8aaea56ee035810bfac0e3158bd07b650a011613189de456b01d3f32664
SSDEEP

1536:Ghuv6F4FxVtkga2hCqnp9Stu73LWsCg6RL5pHG8ZDsLgJM/PVVOght/6YLc5sjpw:0knVtkga+BysC1dTHG82VsUC0Gsmv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bebe611e74e22318891bd6f38069403_JaffaCakes118

Files

8bebe611e74e22318891bd6f38069403_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a0cd90781a854a7886fc533f9e20da7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetStartupInfoA
GetModuleHandleA

msvcrt

_XcptFilter
__setusermatherr
__p__commode
_acmdln
_except_handler3
__p__fmode
_adjust_fdiv
log10
__getmainargs
_initterm
exit
__set_app_type

user32

FindWindowA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ