b8e6802df5e9adb64f2bcc2aa2e0acc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e6802df5e9adb64f2bcc2aa2e0acc6_JaffaCakes118
Size

922KB
MD5

b8e6802df5e9adb64f2bcc2aa2e0acc6
SHA1

d63fd4968adcd4b0e27b4c33c62ca2c992463ef6
SHA256

42ded1aa4e8b8480d8a8ffc2a2333b703eecfd63b818838e66355ff53d2b4fe5
SHA512

0ea7e52c27ce153f45faf9ff18169f3b4e1036cfb00b0f6fa065fff31d9d819a0f01c1243edd516240ecac977cf293a1ff9c52e32cabfdac2a1b976c9470db39
SSDEEP

24576:YvFTwSBTYIqJ5SBgJcbEce/gWWfYkrG7SYIpKB189xL:CO3LzS5b30fWfYkK7SYIpKB1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e6802df5e9adb64f2bcc2aa2e0acc6_JaffaCakes118

Files

b8e6802df5e9adb64f2bcc2aa2e0acc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42c963b55b24e285c23cb4b689944162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentThread
VirtualQueryEx
VirtualProtectEx
ExitProcess

user32

CreateCaret

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bkhfhq
Size: 894KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ