08d010e8372528ecd41acc820cac80c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d010e8372528ecd41acc820cac80c4_JaffaCakes118
Size

38KB
MD5

08d010e8372528ecd41acc820cac80c4
SHA1

09999eb0cb286510ffdf57190ce3c21c5e7cab36
SHA256

71ca49dd202e5248bcada886f7566edfd65840e82a20de32d5634789b128ab75
SHA512

14aa9bb074ba0c58219b31bed12d59c5fa36c831856b0c8b2d2fbaea9f0d8af2209429bdbc80a00914023dd53f0654a1eb22b9b8dbe2b82256d33b7a4f396bba
SSDEEP

768:VUEXghi/6k8uC0q8jt6yuvyFi28D4i2vXStUaQHw0:VUWiMfz/8sOVCw0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d010e8372528ecd41acc820cac80c4_JaffaCakes118

Files

08d010e8372528ecd41acc820cac80c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31a97024393b966929299768ebd5700e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
GetFocus
SetDlgItemTextW
SetWindowStationUser
GetCursorInfo
RegisterClipboardFormatA

kernel32

GetThreadTimes
GetLastError
_lread
CommConfigDialogA
VirtualProtect
SetCriticalSectionSpinCount
GlobalCompact

gdi32

PatBlt
EngReleaseSemaphore
GdiConvertDC
EngCreateSemaphore
DeleteColorSpace

comdlg32

Ssync_ANSI_UNICODE_Struct_For_WOW
ReplaceTextA

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE