8ecf1349c9ba3452b3fab66336dcf23c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ecf1349c9ba3452b3fab66336dcf23c_JaffaCakes118
Size

6KB
MD5

8ecf1349c9ba3452b3fab66336dcf23c
SHA1

f6cdd370cd520c889a95896041f22ae96dcbf305
SHA256

4b23d9ddc09595327bff17d23f98dc36280b5d56213a1d544c59a02e523055d5
SHA512

1fc4b78a28d8384eccdc17e65e44abcaa27cbadd5a2a815169b2a98448bf3cc88eea75043c517f1575e78dfe929c0cf26a3f4af801ee344b325f8f8eac435474
SSDEEP

96:em4gH6941QaGmRIRNw/gOD0E2+FZhHuROSKI3nNAFvz:R4gaaXCRN7OD5yBj3nNAF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ecf1349c9ba3452b3fab66336dcf23c_JaffaCakes118

Files

8ecf1349c9ba3452b3fab66336dcf23c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1acfc1c114c39255ad1446df184fa9ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateProcessA
CreateRemoteThread
ExitProcess
FindAtomA
GetAtomNameA
GetProcAddress
LoadLibraryA
ResumeThread
SetUnhandledExceptionFilter
VirtualAllocEx
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
strlen

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE