8de456dafc6ffc1aaf03e33b3737242c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de456dafc6ffc1aaf03e33b3737242c_JaffaCakes118
Size

29KB
MD5

8de456dafc6ffc1aaf03e33b3737242c
SHA1

eaff1b7576147d27e392ef95f8b7867650797a24
SHA256

5ebd4ee0f7bd74b7a0b02f814acb8a7cd6db9a32cd197107600e682ea422f058
SHA512

2be61ea97f9bbe552afe926317f64ea1f5a7f2cd5e3d5859c6bfde7c033c1912ddcfcc515ccbd58320772465c4dc3b107ae9880aa691abe6761d40d527975acd
SSDEEP

384:ah/GEJolSXyIvgV7vYo+j4VwDgyqP7z5Ldml5o71hy:ah/BJolS3oRY3j4qszZf71h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de456dafc6ffc1aaf03e33b3737242c_JaffaCakes118

Files

8de456dafc6ffc1aaf03e33b3737242c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fceae0e76eb206407c35174ef7cfbf87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetStartupInfoA
CreateFileA
GetWindowsDirectoryA
GetLocalTime
GetModuleFileNameA
ExpandEnvironmentStringsA
lstrcatA
GetVersionExA
MultiByteToWideChar
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
HeapReAlloc
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
LoadLibraryA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

ws2_32

inet_addr

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE