8ec7b2b35b038436aaf8a184f760bf39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ec7b2b35b038436aaf8a184f760bf39_JaffaCakes118
Size

162KB
MD5

8ec7b2b35b038436aaf8a184f760bf39
SHA1

b36e310d56577a5136c929167b50754b840e6300
SHA256

072dcb873148281baee488cb90e5754a616e1a7901d6aaddde170d9669dc529f
SHA512

cad2dbf0a1bf1e3b4d89b0c25395441a3383068b0e93149396c99fc3c363cbe8fe0d3f296f79d2abe5aa6e3fb4e79efe67e8d7bf861179670ae34693807283f6
SSDEEP

3072:uZEUz4L3ICDvV1+9w5K94Uu0xDnPoZ3M4HvxKBpS/IgqNkTwQqT8+UW4i9lQ:uZEUz2lTV1+6sPxAtypSdqNrM89C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec7b2b35b038436aaf8a184f760bf39_JaffaCakes118

Files

8ec7b2b35b038436aaf8a184f760bf39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15de1240418d4b9669edc9cd244654e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fopen
fseek
fclose
_CIacos
floor
ceil
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc

user32.dll..

CallWindowProcA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ