c8b5bb38a5977ae2cd2b1360c963193f_JaffaCakes118 | Triage

Sharing

General

Target

c8b5bb38a5977ae2cd2b1360c963193f_JaffaCakes118
Size

76KB
MD5

c8b5bb38a5977ae2cd2b1360c963193f
SHA1

39411ac5b66ed64861600085a0d310a459edaadb
SHA256

94b421c6b4dfd1f59d99a059d804cb12b74be79d53ab2f90587fe89e1e4c263e
SHA512

af04feddac260cb97c2e30a0e1ef2e6bc36a13726a62cf97077fb8ec0d5276e10d7d443980f36a5c7c7712f0664692d3d95e0fc6c5cde455ed1ba81032c42502
SSDEEP

768:AKsOdug+PFI7XieaJo1mlpTT1uy/pvyFWCnz1R1p8bTjbZU9Ol:AKscugAFIGoITUgpv3Cnzz1Obbhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b5bb38a5977ae2cd2b1360c963193f_JaffaCakes118

Files

c8b5bb38a5977ae2cd2b1360c963193f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21cdd0db0884e9d970fe92330b4b9f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ