8e47c39d2106d77414b4e00b6d2b5656_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e47c39d2106d77414b4e00b6d2b5656_JaffaCakes118
Size

319KB
MD5

8e47c39d2106d77414b4e00b6d2b5656
SHA1

d804859cf298e4dfb7ea3b5b926ba91671a2dc62
SHA256

f73a63f2fc88d18832b3b6a19a56cfe54c193fb351077db70bce73c69119bbb9
SHA512

cc0cb63a11a76f9dc669a4b14c9b42bb27baa877791ed331c819489aef6c019735412c694be3540e16a54f89c23871a31d57e998c56768d82bda146d5e774ec9
SSDEEP

6144:IyAhlGFikofXTYvNCEqLVn15nwd30AvWb40xG693lhaKC8q4IlhPp:IyAhqiJXTgNxqxnHwd37G40xjTL9ULp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e47c39d2106d77414b4e00b6d2b5656_JaffaCakes118

Files

8e47c39d2106d77414b4e00b6d2b5656_JaffaCakes118
.exe windows:5 windows x86 arch:x86

079700deec2fc4d23cff8cc11dad8fa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetProcessHeap
HeapDestroy
HeapCreate
HeapAlloc
HeapWalk
GetTickCount
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetModuleHandleA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

Sections

.text
Size: 301KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE