8ea20681b32f0013136c1b75cc1802db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ea20681b32f0013136c1b75cc1802db_JaffaCakes118
Size

82KB
MD5

8ea20681b32f0013136c1b75cc1802db
SHA1

4c944d659b974e1952dae530e5268f17cd49ea55
SHA256

cbb5dc5f2f5343e8dd6849a7d62fb2cc4bb9c9df34448467d45382986c71a061
SHA512

31de7dae820e5118f8decbe28a0c5f9e7adca358c7b7669fab8d3b4071091d9f6639d110324bd691e9f70d1f5c67a1fb6e732fce0cb64d569ed4edff7e95448b
SSDEEP

1536:wcuGtwxd6qhzSq7ecbxBKHazoEBf1rR0kdc3WnHV7pfOmmd9F0az:duywxdHhzZ7D7KHasofEWHV7dmd9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ea20681b32f0013136c1b75cc1802db_JaffaCakes118

Files

8ea20681b32f0013136c1b75cc1802db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0968c469edc3ff7a9921419619408ed9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncat
__setusermatherr
cos
_XcptFilter
free
_acmdln
exit
__p___initenv
__p__commode
_mkdir
_adjust_fdiv
_exit
malloc
_lseek
__p__fmode
__set_app_type
memmove
vsprintf
__getmainargs
_initterm
_except_handler3

kernel32

VirtualProtect
Sleep
GetModuleHandleW
GetStartupInfoA
RemoveDirectoryA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ