8de2dc10453d40f9f19e7fdf33978963_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de2dc10453d40f9f19e7fdf33978963_JaffaCakes118
Size

67KB
MD5

8de2dc10453d40f9f19e7fdf33978963
SHA1

828f4d539ebc703a810ab339b93e6a3fcfb7bee8
SHA256

8c781be72f956ab6f47b90f171715edeac87ef93b77b2d69049149d4695f32ba
SHA512

263d8b904075962b14ab1039c20f733d72ec2e2d5f5f3f7a3bca0209f505cc5ef67a3559e35fe44796837b95a93409bb5b2c0e849e155df6aa15fdcf8a06ad93
SSDEEP

1536:cB3fZx5VmHUj/Zn67QKlm5xuFuKogRxQHkE2x3CfK:a3fL5Vmi6axWUmQ7mGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de2dc10453d40f9f19e7fdf33978963_JaffaCakes118

Files

8de2dc10453d40f9f19e7fdf33978963_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e7123adc7bad87ce5bd24453dc31ec0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32First
DebugSetProcessKillOnExit
SetConsoleMode
GetFileAttributesExW
GetConsoleScreenBufferInfo
CreateProcessInternalA
SetCalendarInfoW
CreateHardLinkW
LocalSize
GetBinaryTypeA
CopyFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE