8eb92a8956cb00dcf3efe331e1612bd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eb92a8956cb00dcf3efe331e1612bd7_JaffaCakes118
Size

83KB
MD5

8eb92a8956cb00dcf3efe331e1612bd7
SHA1

c1fee6a6b87d31e8ee972d2e99fc50b9e3bcab3f
SHA256

0b957c2a93160d23634443e63cbdc8f3d848333de2a9f14838cad4dbc4c199c6
SHA512

fcfceafe4513902c57add60f062b99278cc345d5909dc905d4d7e87b1ec89c00ea2779fb3ca0a58bb026be50c22fd5183921449ad32bd6a32908678e494e7441
SSDEEP

1536:LubWG7/yzr34L5cYIq+tP7WwCHyJUSuJjm5DUwntW8UcjEErxTWDTMqhGKYIZTEP:LuW/Y5cYEP7WwEWUSOwo5cjBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb92a8956cb00dcf3efe331e1612bd7_JaffaCakes118

Files

8eb92a8956cb00dcf3efe331e1612bd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

090c1ecb2d1ebc96bcf02f379b921eca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
ReadProcessMemory
ProcessIdToSessionId
GetSystemTime
ResetEvent
GetConsoleTitleA
TlsGetValue
MulDiv
SetDllDirectoryW
GetDllDirectoryA
FindResourceExA
GetEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE