8dd7765f258510cb86390c3a9f14a452_JaffaCakes118 | Triage

Sharing

General

Target

8dd7765f258510cb86390c3a9f14a452_JaffaCakes118
Size

133KB
MD5

8dd7765f258510cb86390c3a9f14a452
SHA1

b975b16d883d6f286383dd8ca25bc32d72e645c5
SHA256

4f4cd987c9199fb7b7e0bbf8370328d4947ec2239b4601c43ee59c5e175bb577
SHA512

938fc1f5fabf13a08954a876d80d21ec41a5714ce4fe13fba0f745b5009359eccec1940e5e76db0a421547edd5cbb7e00aefa0538f8d1062fa4a9c68ccf65325
SSDEEP

3072:Bt/G0aAbs/m4eZ1drqYHWZQ5WZwhY8qcMr8e:TuxA4KimsQ5swhYJX8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd7765f258510cb86390c3a9f14a452_JaffaCakes118

Files

8dd7765f258510cb86390c3a9f14a452_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4832b26f828343eadc199430fc4578d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

ExpandEnvironmentStringsA
SetConsoleCP
WriteProcessMemory
LockResource
Process32Next
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ