b8a925b36af8c6a5f521eae5c1db673f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8a925b36af8c6a5f521eae5c1db673f_JaffaCakes118
Size

18KB
MD5

b8a925b36af8c6a5f521eae5c1db673f
SHA1

d3835371bd5690baf228ae65a2bce597c8382888
SHA256

7a7e1bed5d4a9636051e7bfcf606252a87dce3522f75536464f768377fd9d805
SHA512

fea926ec558a291910997f665100a92c4b1cad5412e3364a23355b8596fc7ae35fb53824a703bae8493f2083658470409e894fadf3b38156d8a1fb6d5c62e20c
SSDEEP

384:Jo9SdGyo43OM4Zr/h0NXBiFtuziH5Npzs:JfdNTeTLh0hBqtRds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a925b36af8c6a5f521eae5c1db673f_JaffaCakes118

Files

b8a925b36af8c6a5f521eae5c1db673f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

351cc07e6517a5f8579259e0495feaf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

advapi32

RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ