8cd99233ced6b8514430f20c15ae2eaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd99233ced6b8514430f20c15ae2eaa_JaffaCakes118
Size

363KB
MD5

8cd99233ced6b8514430f20c15ae2eaa
SHA1

eaa8a0f5a80afd5477ebfbd2d0626c27a7ef352e
SHA256

0b1669b50580fbde6170df3b04be3faabab5fdc6fcd4f0b1454a6e9e91b24351
SHA512

3fdca8b7d28d18f103d520ff27a5d22344b085e8e7f6a6e7755949de15e2af56867a0c6041c49021d377efa0f77887d7bc1fd237d1521b0e9ddda6ca56cf34e7
SSDEEP

6144:QqN6CwIrb4LokzSgkz5vCKiHpA9FxJgAjCx5UtDgmctUYlSOFui+K:QeRrE+ZC7pA1JY5UimctUauif

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd99233ced6b8514430f20c15ae2eaa_JaffaCakes118

Files

8cd99233ced6b8514430f20c15ae2eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 287KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE