8e1dc5c8cfd9781312d8905123bf9735_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e1dc5c8cfd9781312d8905123bf9735_JaffaCakes118
Size

154KB
MD5

8e1dc5c8cfd9781312d8905123bf9735
SHA1

5573e51146cf99e87edcfbc2fee88aa354c3cbea
SHA256

ff998d4effb73b0118014c72ea04d646fdfece61664c02b4e4fc3fd34f0c9eed
SHA512

5a1acfda36873e7c72599db600ff1d0a277c63e755f59f72a600ad664daf3efcb32567d76af31a487d18e14e569c7a0cd860d5f3e5eda9ad5eddc7b1b2cddceb
SSDEEP

1536:oWUJIr+93dDFX2xGL7/GfQz4MCzDpsbj07YQog3ZhqCGLdpBDCFag7xkGmKKydC8:nkdZN+Iz4MKDQIZ2pBAkG9Ldb4KV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1dc5c8cfd9781312d8905123bf9735_JaffaCakes118

Files

8e1dc5c8cfd9781312d8905123bf9735_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb5acd9b3756f2f8aea27c4447d00bdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
HeapFree
LocalHandle
GetFileAttributesA
EnumResourceNamesA
GetTempFileNameA
CreateIoCompletionPort
Heap32ListFirst
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ