b8e92042691d341b0b598d2920126d42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e92042691d341b0b598d2920126d42_JaffaCakes118
Size

24KB
MD5

b8e92042691d341b0b598d2920126d42
SHA1

3c37d81794a40df31a2f1d94d5d927ed6c899070
SHA256

3510b3c2634a12bcbed11ac3e849b28bb67b807038f0d94ab3a8009bdcca27f6
SHA512

1174286b06816335c5ad32f244cf6ae9d19ea72e9dc8e1673b380f2eb22aabdfdf529d2bdf5fa97e909d5266eb75b773269f38e8faef22351575d34f9fd02d3e
SSDEEP

384:AetK1Vb0QhdqDbsPkvlt+eySLhS4MM8IsSCx+eH/NrhxW22yRZU8:Akydy6kv40hS4MMNpeFhxW9yRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e92042691d341b0b598d2920126d42_JaffaCakes118

Files

b8e92042691d341b0b598d2920126d42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8aae25bdc784ba4455fbd8946b0118b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
strstr
free
calloc
fopen
fclose
fwrite
__p__commode
malloc

kernel32

lstrcatA
IsDebuggerPresent
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleHandleA
GetCurrentProcess
ReadProcessMemory
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE