8da1dbbb53626b83e069c6788ff557dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8da1dbbb53626b83e069c6788ff557dc_JaffaCakes118
Size

400KB
MD5

8da1dbbb53626b83e069c6788ff557dc
SHA1

f438568f128f6c0c97cda7a16a917d44d39a272a
SHA256

84e203a0c7dd916bbc5cab3d43c6ca2a41c371d5c9e45e30bef9e204aae7b4ae
SHA512

44f79d03f53efb883378161229d4aa260adcd40078dca5cc3af5019fa49389d4687343571b4790bf743aa01850ef3212b4f9fb0a729e7d1a374e1da513ecb287
SSDEEP

12288:rksp22djKTO/H75wZp10hmbg2qABGwwl95L/DEtXnj:Asp22d+S/aZnkmblqAo7BEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8da1dbbb53626b83e069c6788ff557dc_JaffaCakes118

Files

8da1dbbb53626b83e069c6788ff557dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 383KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

QFfcDBU0
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ