b8157ae0fbd4f9d8cf25492e527cebb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8157ae0fbd4f9d8cf25492e527cebb4_JaffaCakes118
Size

5KB
MD5

b8157ae0fbd4f9d8cf25492e527cebb4
SHA1

542549f9e7974307b2a26d87d66b272cf5d13632
SHA256

4f03e0c4e9ef625ed71ad4c34ffc1f66d5becb51d9f3ceec4d395d0e48228a2d
SHA512

d64f67f495eff592c1986b8dbf962450b5452e88ec5c94b1c2b84c240161da8d7102dc5ff2e25ee5e6d5847e97e2750a3a9a14cabd3d7de349a12313efcbd96b
SSDEEP

48:6mIloKcVIHqux1EXLI9rIx/qyT5hh+sI9BvUeLrxguAHtNR:ANKux1CMFEzhWXHhGtNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8157ae0fbd4f9d8cf25492e527cebb4_JaffaCakes118

Files

b8157ae0fbd4f9d8cf25492e527cebb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

050cf7c099054664b77df7e2d0bcebf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset

kernel32

GetModuleHandleA
HeapCreate
GetCurrentThreadId
HeapDestroy
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree

user32

GetInputState
PostThreadMessageA
GetMessageA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.code
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ