08bcc2b2ce987213a5ad2199eada9d70_JaffaCakes118 | Triage

Sharing

General

Target

08bcc2b2ce987213a5ad2199eada9d70_JaffaCakes118
Size

121KB
MD5

08bcc2b2ce987213a5ad2199eada9d70
SHA1

879728bfdeeb672fd44c24ae02427bce1f9206e9
SHA256

470f541cff08935f58e742d48880ec777f2c5b55e94e14cfd18a5f09def52dc5
SHA512

93984f9cb3dc33f3469a45fed3ca18d7702199bc790efbbd49d54d769102dd3ce54d4355b2fc08761b8469891fd0bd0463cd19040ba59c01766392682d3a41cd
SSDEEP

1536:2/OBXq890Qul4agWedX3Zyd5GQMdYDRTSe2/exvPo+f896h6X573N:2mBz0Hl4jLgaiDxSAvqQ6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08bcc2b2ce987213a5ad2199eada9d70_JaffaCakes118

Files

08bcc2b2ce987213a5ad2199eada9d70_JaffaCakes118
.exe windows:8 windows x86 arch:x86

9b0e55830a0dc6e2b4691700cccde741

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionA
LoadLibraryA
GetStringTypeW
InterlockedIncrement
GetDiskFreeSpaceW
GetDiskFreeSpaceW
lstrcpyW
ExitProcess
GetLongPathNameA
InterlockedDecrement
GetExitCodeProcess
GetPrivateProfileIntA
VirtualAllocEx
Heap32First
GetCurrentDirectoryA
GetACP
FindResourceW
WriteFileEx
SetEnvironmentVariableA
GetPrivateProfileIntA
WaitForSingleObject
lstrcmpA
GetModuleHandleW

apphelp

ApphelpCheckExe
ApphelpCheckIME
SdbCreateMsiTransformFile
AllowPermLayer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE