8cb42fbe99f33ac31bd393aa1416b3d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cb42fbe99f33ac31bd393aa1416b3d3_JaffaCakes118
Size

25KB
MD5

8cb42fbe99f33ac31bd393aa1416b3d3
SHA1

04a891130c967b18dbfac266673c77c3e0e1d8b1
SHA256

95bea6da3ac63f37b9f524e48eb66d26cb15d1622911a26fd2b375612ad74838
SHA512

561760b2ba2d70b4ca74db50bf3468cee0f04a1631ec0bd9291aad0b4e7317f7eb83d78c208c637c752d04412e57e66f64dd9d134db61b854f7e0f85552fce25
SSDEEP

768:HygT61+23p6DSz4REAn5nN320R488rceyZ:Hg1+ipms4REA5nNG0spyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cb42fbe99f33ac31bd393aa1416b3d3_JaffaCakes118

Files

8cb42fbe99f33ac31bd393aa1416b3d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39fdd0e8b30eba60af052a8e2904aafb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
ReadFile
CreateFileA
GetProcAddress
GetModuleHandleA
CreateMutexA
OpenMutexA
GetFileSize
CloseHandle
GetStartupInfoA

msvcrt

free
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
realloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ