8e074db359482f4d709dd75f4162d375_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e074db359482f4d709dd75f4162d375_JaffaCakes118
Size

36KB
MD5

8e074db359482f4d709dd75f4162d375
SHA1

19a5d81a8a15f4b835d5f28bd8c4927bd7cdff2b
SHA256

d86a17dda326c5eef62420d080e773b4a24f322f46b216bc2312fadeedc19389
SHA512

4ebdf16969d0c64577e1dee03afd4d03b40e029fed448d05209c9f81295b301b45fb8d81dd56947e8a6d28e77be5cb5a17006ec6112b34e22f50f88aa34985c7
SSDEEP

768:A4A5LWG6k/0rmiQqaJ13v0lYbTd/nTWuOAn7p2jGQtTRe5KUKkqiyH:Aljs9QqarkYbTd/nCAp23tNe5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e074db359482f4d709dd75f4162d375_JaffaCakes118

Files

8e074db359482f4d709dd75f4162d375_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2a37d227619d16f6c49e31d1c52e745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetErrorMode
LoadLibraryA
FreeLibrary
VirtualProtectEx
ExitProcess

user32

GetWindowModuleFileNameA
GetClassLongA

Exports

Exports

InitHsnpfyranbp
Wjdpteswyh

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.secdata
Size: 800B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ