8d087fd17a36d1a444cead3c5dd9b01b_JaffaCakes118 | Triage

Sharing

General

Target

8d087fd17a36d1a444cead3c5dd9b01b_JaffaCakes118
Size

295KB
MD5

8d087fd17a36d1a444cead3c5dd9b01b
SHA1

ed8325e245ed0e3716fba632ae181a1c911eddab
SHA256

e949c90f4ff49cbf35b0477ca8a49be18185d754d206c83c5b5a52ac4c57ad8b
SHA512

5ce91c3383a92040a536b3399cf7238f990a1e709bd48cb972fb41cfa66a580f03a898b27df0e7a56a8ee5d6131244664fad58a446baef954527501851ae05fb
SSDEEP

6144:4RXe6tSRUTV5n6ALFLF1TpfLYOd8bs7NI0h1K/t14523cps3i6PWK5WopRLFMbcb:4RXezRUTV5nfVVfLtLA1452Mps3i+Rpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8d087fd17a36d1a444cead3c5dd9b01b_JaffaCakes118

Files

8d087fd17a36d1a444cead3c5dd9b01b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c06456c919add16c1d5d3cbe34c37815

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__fmode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ