08f1f896d20682d0e65665efa4546b07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08f1f896d20682d0e65665efa4546b07_JaffaCakes118
Size

216KB
MD5

08f1f896d20682d0e65665efa4546b07
SHA1

cdab3eb97dba16aa6e401f09bf8a413c9bf5c7d9
SHA256

d77d0719d9550ca81712c1ad18e2d575b927db0303df923eecede997fd58117b
SHA512

62b0a757e8afd16813ee05a822cd126ea38fbceee10ed78842a2aa97c8937c304d661a26cf9bcb018994acaf58207f4ed852a81675b7fd0d246503ef8c0cbd57
SSDEEP

3072:iB8oeNwSBq42/6tcN38mE58Hntqs11oTE0cf1HGtOSwtjM29r5SaYPw:iBZgwSQVNzb1oY0MBdSWjMia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08f1f896d20682d0e65665efa4546b07_JaffaCakes118

Files

08f1f896d20682d0e65665efa4546b07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d088c488f8ae64d8c021fd62fb796930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
AddConsoleAliasA
GetPrivateProfileStringA
GetCommandLineW
ReadConsoleOutputCharacterA
GetModuleHandleA
GetCommModemStatus
GetProcessPriorityBoost
FindVolumeClose
lstrcpy
GetVersionExA
HeapSize
HeapFree
IsDebuggerPresent
HeapUnlock
OpenProcess
UnregisterWaitEx
FindResourceExW
BeginUpdateResourceA
GetLocalTime
lstrcmpiA
InterlockedExchange
SetConsoleCursorInfo
GetModuleHandleA
DeleteTimerQueueTimer
VirtualAlloc
SetFilePointer
HeapAlloc
GlobalHandle
OpenEventA
WriteConsoleA
FlushFileBuffers
GetComputerNameA
EnumSystemLocalesA

ws2_32

recv

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 200KB - Virtual size: 849KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ