8f06cc4b1a97decb510ceadd82db6ef1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f06cc4b1a97decb510ceadd82db6ef1_JaffaCakes118
Size

3.3MB
MD5

8f06cc4b1a97decb510ceadd82db6ef1
SHA1

364effa00fca6fc2d7f06bad986d14b778d8c485
SHA256

2415f09498edcfc03b3c6395467fb996ae00705b1e3efd9bed19d3ae91584905
SHA512

a18f6b9ae9e4e99a473ccb08799a69ca2fed9a936d4e6c6b06a7f7f0b8c61817ae17e1a99ecc0077a5b9df9291821c57b9ff8f38cd6404157370e86837601884
SSDEEP

98304:rBC8OZXldoxXXpFDB9Zd+sp62NLbgdB2AiE:rBC8OjdoxX5ZJd+sHyd8NE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f06cc4b1a97decb510ceadd82db6ef1_JaffaCakes118

Files

8f06cc4b1a97decb510ceadd82db6ef1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87703b55d6314f3ada3f79a18cb12385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetForegroundWindow

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ