8ed437c4cf8265913586799968a158bf_JaffaCakes118 | Triage

Sharing

General

Target

8ed437c4cf8265913586799968a158bf_JaffaCakes118
Size

16KB
MD5

8ed437c4cf8265913586799968a158bf
SHA1

d431a0fa132149adbc4a0aec0a47e25b4443a8dd
SHA256

12f17e597e2e479277856c342a90d0cbb2ef24a7916c04a860be44e9cd43d980
SHA512

64bf532f28206690f09ac7bceb9d6b33a63c6912c24bffa019fb4702f86b56b8f6d8d96d9948c217cc4f3379e1ed3825fe1757e7fab73cec8770d7fe35c29a81
SSDEEP

48:ScTOwS7v28LNLgBhc88x8WUVtMXYP/wZ6u1j3blf2FIVOuLNUoyl12mMvCGYtvLP:9TCLLxgLcCWBXFou1j3BZQANUoyn2e9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ed437c4cf8265913586799968a158bf_JaffaCakes118

Files

8ed437c4cf8265913586799968a158bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

585090fc65a2f948f1e4cf8b2123d3f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord665
ord5583
ord1200
ord354
ord823

msvcrt

__set_app_type
_except_handler3
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
sprintf
fclose
__CxxFrameHandler
fopen
fseek
fgetc
fputc
__setusermatherr

kernel32

CloseHandle
CreateProcessA
GetCurrentDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
WaitForSingleObject

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE