8c195323524d6c33448c4e42f78a5b6c_JaffaCakes118 | Triage

Sharing

General

Target

8c195323524d6c33448c4e42f78a5b6c_JaffaCakes118
Size

931KB
MD5

8c195323524d6c33448c4e42f78a5b6c
SHA1

00a4531d287eadf5333be78eceeb85e6b5a13528
SHA256

d97b79cd8db90ad1ae84c795ea8df6e29aa536bee901622f92f91ac472aae47b
SHA512

5cd543b3807e9e58b21df59b08bb4fa351d6f35fac611f76be41b1c5a0b5af249b71a61dbf0939acabbda2725979cc7eb83dd727ee56a2036c351c088e9079e1
SSDEEP

12288:PDA1JpGx4IKQnT4T5rLt7CewtE49PE5On:rA13Geg4Nrx7CbtEA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c195323524d6c33448c4e42f78a5b6c_JaffaCakes118

Files

8c195323524d6c33448c4e42f78a5b6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e304217fc16c011615a0ec22783cbfae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE