8c0f9be7879b022fad03f66311fb3383_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c0f9be7879b022fad03f66311fb3383_JaffaCakes118
Size

37KB
MD5

8c0f9be7879b022fad03f66311fb3383
SHA1

3c2bc0b408ebe5b96a562c754c825882a1414f4e
SHA256

1d53602d4671fe711fd207d095c840ca9264ba872515097b3f3ee97c6ef5e8ea
SHA512

67dc6f7bbe2802b4c2cb1e325558ab9e6de08ddf64c5ba080ef0bd7c780cb13ab65659d6232e7e41bec581f8f407e6110753322121e27398adfa91f6d0e06b36
SSDEEP

768:qp8hwzPVxjWolSmBRPV1xUsxidpz1kX7dpYcTa9k:q2hwbVFRV4s2hkJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c0f9be7879b022fad03f66311fb3383_JaffaCakes118

Files

8c0f9be7879b022fad03f66311fb3383_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3b8ddb217d4adfcc1d1046149970b531

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNamesForVolumeNameA
GetLastError

gdi32

SaveDC

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jxn
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE