8c335d99516cebf662abc7bca08daca8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c335d99516cebf662abc7bca08daca8_JaffaCakes118
Size

166KB
MD5

8c335d99516cebf662abc7bca08daca8
SHA1

d808f3b95f68d4483edbe0c06ece26436047f9e9
SHA256

2732dbb03b1bebc2c73534ab888b98be6dd2088231e19520f89b986c7f5f0a31
SHA512

44255af768e1eeed207aabd6b319d4087f71666cf19728f06fbb5b2b48cd31eeb7f6e8172a76326fada81c24e6089fd6433137cebf7eabf74c97c44131159a40
SSDEEP

3072:DS1n6ZdhQ+QiQ/QNQps3/qWOtTBfwln5ICjCz6GB5LisafTsDPudI:6Mp/SMv3iWOtTBQ5I0Czfjaf4Tu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c335d99516cebf662abc7bca08daca8_JaffaCakes118

Files

8c335d99516cebf662abc7bca08daca8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6027e130d980bad4c2526dd7dd3ccbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

CreatePen
DeleteMetaFile
SetBkMode
ExcludeClipRect
SelectPalette
SetDIBits
IntersectClipRect
SetStretchBltMode
GetTextExtentPointA
GetMapMode

msvcrt

__CxxFrameHandler
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_ftol

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ