b008f4a8c80a45601afefcada355aea9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b008f4a8c80a45601afefcada355aea9_JaffaCakes118
Size

33KB
MD5

b008f4a8c80a45601afefcada355aea9
SHA1

0613048b7e1c87f0f044c8bb9ce271a946af5c6a
SHA256

d0009c6912a7cbdccab415b3c6cc7e9a9dc89fc295fc0ea68a75554c5060b17e
SHA512

158564433848f4bbe6892eed02454c91d3c495d60108acca0183c856e323cfd9da9bfbdbe007953e5437b8c0b4b53bc3a2fa3f498c3cfaf69ae6ea8fdb694caa
SSDEEP

768:EeS2484iobTxknR5CZeJEN9p9Ei+Xu46m4Uw0hj4eXfksVZtr2Uu:JSwsxsRwZKENhELL4mKeX2Uu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b008f4a8c80a45601afefcada355aea9_JaffaCakes118

Files

b008f4a8c80a45601afefcada355aea9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE