8bfa8e9c93dc0b6665ed7acfd291851f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bfa8e9c93dc0b6665ed7acfd291851f_JaffaCakes118
Size

19KB
MD5

8bfa8e9c93dc0b6665ed7acfd291851f
SHA1

6462af7c57b5f9ad25c5597216796dbd482dce95
SHA256

5a36b7773e9c0c3ce29809c009b768d6363858a465ba919eaf2d7831a415ff06
SHA512

a290d7aca622d227db3dae84f604ce93de109f18ae9035eec7dde22b40ebff33ef4e4d7079515ce1b3519f11a77e8eb8cfd65b93313786ac0e6b81527dc75248
SSDEEP

192:vkRV3OelcU5Iec7RbQoAdvDIniAuVCBiR+aOcAZlgUO8C5:vwee9rc9bvkvUniAuQByLOcAZl5K5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bfa8e9c93dc0b6665ed7acfd291851f_JaffaCakes118

Files

8bfa8e9c93dc0b6665ed7acfd291851f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8a3f78e1be3bc1bc5fba925f17ae4f10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memmove
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ