8df52cd731682e0f8ae569b5dd3e803a_JaffaCakes118 | Triage

Sharing

General

Target

8df52cd731682e0f8ae569b5dd3e803a_JaffaCakes118
Size

66KB
MD5

8df52cd731682e0f8ae569b5dd3e803a
SHA1

7db418f81686ec239b789e8fe111c2d0165725a3
SHA256

29b0acd85550f3aa45a33262ef68f2a5edc9cf2790ab0355f9d6c0274b71a0bc
SHA512

cece650be2e6b99079cef8b615b2ce5a9e626e904c5297c61eb4e80693dbcb221cf5f01fd69f53f83f711b319b9d41b5630e33d7de737490c2d19772e68804da
SSDEEP

1536:MVHXrTvmZy264JzBc4qu9E3mTwkhVnGqqrpXig1CaO:Mx+Y264JCS93RjEZu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8df52cd731682e0f8ae569b5dd3e803a_JaffaCakes118

Files

8df52cd731682e0f8ae569b5dd3e803a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30e018a0448b4f257f98df1e87315127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
ReadFile
WriteFile
CloseHandle
CreateFileA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
Sleep
lstrcatA
lstrcpyA
LocalFree
LocalAlloc
DeleteFileA
lstrlenA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileTime
GetFileTime
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
GetTickCount

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ