8698b02c4e63f648daccf29aba4b8e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8698b02c4e63f648daccf29aba4b8e1b_JaffaCakes118
Size

143KB
MD5

8698b02c4e63f648daccf29aba4b8e1b
SHA1

c52820a6be6bc78463dbee7fbaf939f88b6a3a42
SHA256

87e9219d0bccdb4edc0cb9f9cc387ca349236b040915e3b14284af697de744f9
SHA512

972b4d4df2617a30b11029cd51cef314b630da31c7583380b45acb3733b70ecc91a18b56ba96ccde69e66e12e2b2c5796576f5897b571c193027cf81fdc9b7ab
SSDEEP

3072:en9GDKIPi2MKer5n/mb9ukYIs2lyc7M4rEGbbNbOCgnATgbInV:e9GDaZKer5n/mbjNcmM4NbRitI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8698b02c4e63f648daccf29aba4b8e1b_JaffaCakes118

Files

8698b02c4e63f648daccf29aba4b8e1b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0f2d1c2fa0b2fdd4f1c86fe6d45b481d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
ExitProcess
GetACP
GetConsoleMode
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
UnmapViewOfFile
WriteConsoleW
lstrcmpiA

msvcrt

time
__p__commode
_cexit
_except_handler3
free
malloc
sscanf
setlocale

user32

EndPaint
EnumWindows
RedrawWindow
IsWindowVisible
DestroyIcon

oleaut32

OleIconToCursor
VarBstrCat
VarBstrCmp
OleLoadPicture

shlwapi

SHDeleteEmptyKeyA
SHDeleteValueA
StrSpnA
ChrCmpIA
PathFindOnPathA
StrStrIA

Exports

Exports

SetPriority

Sections

.text
Size: 74KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ