b8717117f76cc99b559091d0224525bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8717117f76cc99b559091d0224525bb_JaffaCakes118
Size

147KB
MD5

b8717117f76cc99b559091d0224525bb
SHA1

ff2ee50703017e530d338405aa343fceb343ea8f
SHA256

c7c7d75bb45afe27d9e413a481f89b91a92ed2198071d4e45934a4c2a104b7be
SHA512

665070406c06a2ca389a3bfb0cd8cd4e0d5e1c64d0a299e915ab8fbe42ad22d84b0be169bd6756efbade1b0da7b5b838531c17eee851e14ca6d357b01682527e
SSDEEP

3072:zfNoUA4SADT1tognKq4AEJpvTLg/Q+fnFOxkphJf93B:zFA4SA31u3Pp3g4IIkphzx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8717117f76cc99b559091d0224525bb_JaffaCakes118

Files

b8717117f76cc99b559091d0224525bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38e47338c44bd181505f043e1c463e7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
IsDBCSLeadByte
OpenProcess
ReadProcessMemory
SleepEx
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ