8d43d4e66fd0bef26bad6f5cc984d3b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d43d4e66fd0bef26bad6f5cc984d3b6_JaffaCakes118
Size

49KB
MD5

8d43d4e66fd0bef26bad6f5cc984d3b6
SHA1

b52c1c9655f854c6b84ca82ea04d893dcf9cd51f
SHA256

6892376c645c0fd3cbcce00de6aca7f4f2d6770e946a5cdc2cf80524c99a38d4
SHA512

3233a4d99e098b466025e0c7680838715f59bf436af83b32af83a4cf978a58834755f0bf7bab78b5011fc85d3b71c463226541686f7a992c191bcdb027873d1f
SSDEEP

768:Emx2toP2Umsk71EyuOfX1IIm1uJKDCD37fv3uzKUy6b7yi+nbu9hD:yt42DLEIv1IImAJK27fv3uz1b73+n6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d43d4e66fd0bef26bad6f5cc984d3b6_JaffaCakes118

Files

8d43d4e66fd0bef26bad6f5cc984d3b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

257c76d0f207dbc4356f6e64fb249bad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
__p__commode
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_except_handler4_common
memset
_unlock
strcmp

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ