0c8dc7a003930fee8651b97b77fb9814_JaffaCakes118 | Triage

Sharing

General

Target

0c8dc7a003930fee8651b97b77fb9814_JaffaCakes118
Size

198KB
MD5

0c8dc7a003930fee8651b97b77fb9814
SHA1

cf0dc518b6a13f2eeefadaf6e97859c21c976723
SHA256

41c50f86ab2d8b16ea0a854488383efb01f8faf6e68a5d4fa4df7ecf3cf76583
SHA512

9aab6ad4113549b8c461b6061b7bdbe86d86cc81177412a62d2c6156e81a9b534c6c7f57b93d464ae16d8d1ee35413a2e11c933155f41a07d6ee8c8587bbf9fd
SSDEEP

6144:S6tpZlwtZnCQwWsf6YX/Hx6KQIdNj8uH5Dtfjwoipd:SWLlkCpj4ZWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8dc7a003930fee8651b97b77fb9814_JaffaCakes118

Files

0c8dc7a003930fee8651b97b77fb9814_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33083ed183f8fab8e28775ebc57d84b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle

ntdll

RtlCreateQueryDebugBuffer
RtlRemoveVectoredExceptionHandler
RtlGetActiveActivationContext
RtlIntegerToUnicodeString

advapi32

RegDeleteKeyA

gdi32

GetNearestPaletteIndex
GetMetaRgn
GetFontData
GetDeviceCaps
EndPath
GetPixel
GetSystemPaletteUse
StrokePath
SetRectRgn
SetPixelV
SetPixel
GetTextAlign
CreateScalableFontResourceA
CreateHatchBrush
CreatePen
DeleteObject
SetBkColor

comctl32

RemoveWindowSubclass

wmvcore

WMCreateWriter

Exports

Exports

KBmol

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1009B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ