8c529c6d9289c41258b386fc005f9e36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c529c6d9289c41258b386fc005f9e36_JaffaCakes118
Size

96KB
MD5

8c529c6d9289c41258b386fc005f9e36
SHA1

730a0d010d27621d669d6ee70d03445b742dcaa4
SHA256

5e15a994a4fd34b40eae4465a9ab4def547eb50b3f1b0330d369327145ff4fa5
SHA512

b911047106c14febaa0efebf0dc28d1d1245c9a5c1eca202a964464de19cba4b6ca7408f3d3f1e6533740a9c1712c6768ebe7b1fb112dfd0331ebab732bc6771
SSDEEP

1536:rIm+9AovOugMF0ILhJllyjBFxF4iMXAUxSjeqJvhmjK5ZxMbnbz68/2ytOOp86u8:UmyAovRxF0alojlOJDrq1kjKrxMrbz6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c529c6d9289c41258b386fc005f9e36_JaffaCakes118

Files

8c529c6d9289c41258b386fc005f9e36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fd8caef2d1c62337c721b62fa246c6ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

abs

user32

GetFocus

kernel32

LoadLibraryA

advapi32

CryptDestroyKey

Exports

Exports

��ainPressA@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressK@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressR@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainPressW@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainWordA@777GPAUHINSTANCE__@@U_COMMPROP@@~F
?GainWordW@777GPAUHINSTANCE__@@U_COMMPROP@@~F

Sections

.bhgj
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uni
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ansi
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ