8c6cc0149b8bbd6145145f0a6aa9a1c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c6cc0149b8bbd6145145f0a6aa9a1c1_JaffaCakes118
Size

771KB
MD5

8c6cc0149b8bbd6145145f0a6aa9a1c1
SHA1

c82ffc4432a0fbb3d42e10b33bb04016442cf6a4
SHA256

f2877ef89d2138d67aeda21a321035fa32eb1d8c0c639c2838ed463b46986934
SHA512

75f15bac5d8d332edb4de97e100f3cab7eb4ad90e507ed3c12e335a1cbf8e79daddb6aa4f0e53e68eb8f01088dba5550df5f55444a58ed6bcbb3466b68716db2
SSDEEP

12288:eJhZ4+jPjEkQLzwAGKjcGEE43UVWvhZuECNwbBo1lfDcs52+HAbysIp:YNjLULGKPAUVWvhDimaKs52+HAGsIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c6cc0149b8bbd6145145f0a6aa9a1c1_JaffaCakes118

Files

8c6cc0149b8bbd6145145f0a6aa9a1c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1166f24ba15dd8d6490de5b56c621cb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PrivateExtractIconExA
GetWindowModuleFileNameW
AnyPopup
DdeCreateStringHandleW
IsWindow

msvcrt

_getche
_mbsspn
strxfrm
_statusfp
_dstbias
__isascii
_wexecle
acos

kernel32

HeapAlloc
ExitProcess
VirtualProtect
OpenSemaphoreA

ole32

HBRUSH_UserSize
CoGetClassVersion
CLIPFORMAT_UserFree
StgOpenStorageOnILockBytes
HACCEL_UserFree

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 602KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE