8e18ab7ecbe7c843fa182993050aa2fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e18ab7ecbe7c843fa182993050aa2fc_JaffaCakes118
Size

270KB
MD5

8e18ab7ecbe7c843fa182993050aa2fc
SHA1

e42186ab8025ef4bb615ee049b8fb66def715ee1
SHA256

0a3542f76e9200a2099807eec77edaf31d1a6389cd19058bc0623654bc2230aa
SHA512

1abc688c0a2cb7c2f924c14b92b8f848ad3793d6607d77ff5422cf8f6eafbb29b66934652d36eb3708764d004310a8f1b30cded7654a664340b7afe3e07605b3
SSDEEP

3072:BmzJktbbENFvx0HPaeXseTbCbXRVr9j3f0gKvzCrsWdoXz1fm1noSCgcg8Z+6HSJ:gzJktb4NFWbcePCbXtGCYu1no+4y8y1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e18ab7ecbe7c843fa182993050aa2fc_JaffaCakes118

Files

8e18ab7ecbe7c843fa182993050aa2fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2edac859905793c7264e5d89f98d853

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Download\test123\3434\Release\3434.pdb

Imports

kernel32

GetModuleHandleA
CloseHandle
ReadFile
GlobalAlloc
CreateFileA
GetSystemTime
GetModuleFileNameA
GetTickCount
Sleep
GetProcAddress
LoadLibraryA

user32

GetKeyboardLayout

Sections

.text
Size: 4KB - Virtual size: 701B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ