8407315e299d7a400fe6347f686d6a37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8407315e299d7a400fe6347f686d6a37_JaffaCakes118
Size

120KB
MD5

8407315e299d7a400fe6347f686d6a37
SHA1

1befaf1a9fc84243f9eb7cead4998459f18e5dff
SHA256

105de2ad189c7cb4f0a10a4d1b9a7008a804676b30c222981394119177fcf585
SHA512

86229c2cc73b983d93ef9aeb4d1e0c8cd6e8119b35c59b1f44ecabb8d5ee52fe22c2207e4e1c26bdfb751704ed05553283b3fb15d9d3cda08148ed140ae35e2c
SSDEEP

3072:eP1erO5/zs1SaKg+/DhvGtvtxXnoT1MMeQ4N2pW1F9p:KerSQSaKgUFZkQgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8407315e299d7a400fe6347f686d6a37_JaffaCakes118

Files

8407315e299d7a400fe6347f686d6a37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b198584e9849cbe143ce55accc0cd16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetComputerNameA
ExitThread
VirtualProtect
LocalFree
ReleaseMutex
ExitProcess
SetFilePointer
GetCurrentThreadId
SuspendThread
LocalAlloc
WaitForSingleObject
ReadFile
GetModuleHandleA
GetVersionExA

advapi32

GetUserNameA

user32

SendMessageA
PostMessageA
GetWindow
GetForegroundWindow
CreateDialogParamA
ShowWindow
GetClassInfoExA
GetSystemMetrics

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ