4bc7927f5cda9995ad6bd85adb8f0a5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc7927f5cda9995ad6bd85adb8f0a5a_JaffaCakes118
Size

20KB
MD5

4bc7927f5cda9995ad6bd85adb8f0a5a
SHA1

2b9816d684651f582608ae5b113d5218c3de0c66
SHA256

8b1b276eaea4396723752525f612fd3b5ccfa5d125b1b7732e06e68f4cfbb5ec
SHA512

1847efc12af8eab0238c3adf96929415cf499941b77021eec6f64ecddd17a42c70c1b0a5175834aed13c5df71995f89884059712db395fb55aab709546f90b7e
SSDEEP

384:pEeTjMqnb9mfTzeWuo67eLE6GSLuh00P/J6FqGClpLFV:pEeTjRbQ7zef7IzqJHtTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc7927f5cda9995ad6bd85adb8f0a5a_JaffaCakes118

Files

4bc7927f5cda9995ad6bd85adb8f0a5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65989823b52ef83c9a6d0352caf985d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
OutputDebugStringA
GlobalFree
SetEvent
VirtualAlloc
IsBadHugeWritePtr
GlobalUnlock
GetThreadLocale
GlobalAlloc
GlobalLock

tapi32

lineSetCallData

user32

RegisterMessagePumpHook
SetTimer
SetPropA
GetWindow
IsIconic

Exports

Exports

Rvieedmtl
WriteSbmysilb

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vmgnccg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE