08090314380cc0875992727e84ec3c40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08090314380cc0875992727e84ec3c40_JaffaCakes118
Size

106KB
MD5

08090314380cc0875992727e84ec3c40
SHA1

cd6190197048101d2239fd08e0c322173d175913
SHA256

1f8187ff1cd90d8f40d71e5c316fba36ef80f4d2db1f0ea3927284929f385b05
SHA512

bcd09771cf111d839484374506079cd89667daea0bbf7971f3ccfc4988dbb68af745a2307102a2fff3043e6e40b5d4923f0b414f97a13576c51b401c19e40b3d
SSDEEP

1536:jXE63emaGGT4HQ4dnFnsgM2f1NjCSL5cPh9WEAS5rCmthP5d528ail0CHQ4B:LE6umb+4HpKgM2Mh8EHBvPP5dfP0Cw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08090314380cc0875992727e84ec3c40_JaffaCakes118

Files

08090314380cc0875992727e84ec3c40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2196aab126d1ad3168aa39cff18d045a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

user32

DdePostAdvise
CascadeWindows
ClientToScreen

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE