8dc52f318503b93b6d2ef649c265e031_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc52f318503b93b6d2ef649c265e031_JaffaCakes118
Size

568KB
MD5

8dc52f318503b93b6d2ef649c265e031
SHA1

8dee448a54ac191b1aebd4c0fc394543939e77d2
SHA256

1113b1a4005a1504eecd822d5eab9b7f9712bd1ab4ce847abb6bcb51d3762988
SHA512

1b2fade1fbb79857bbcf039eff097696a3bc56e6714fccca3f53039d3cc994a411b23224d1b42da066a1d7ba44c04b2fb29c7ad5673f04fda01f3e7cd542d6d8
SSDEEP

12288:szRms3dgi5PxCXyZpnL1zpBjtEjFqw7f34Sr0cSy58BODytIX:Y36i5pCX6pnLxjtExqw7P7VS17O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc52f318503b93b6d2ef649c265e031_JaffaCakes118

Files

8dc52f318503b93b6d2ef649c265e031_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b178ed09bc804231f6ff85989376f257

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
TlsAlloc
CompareStringA
HeapAlloc
InterlockedDecrement
SetHandleCount
GetProcessHeap
ExitProcess
lstrlenA
GetCommandLineA

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE