8890d1f24863939dd22f50bbab023219_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8890d1f24863939dd22f50bbab023219_JaffaCakes118
Size

167KB
MD5

8890d1f24863939dd22f50bbab023219
SHA1

81d54c6137d7538b8da3430c6584dda2af79b458
SHA256

c135bd13c7b471913ba79331e8b6a198b66d1a569275927a8183c5fb290115a1
SHA512

8644cbf808e654ed1792e6b80cd117a8893ce675039b9223135cf7cc3926de4fb6dfafbe2677e89d61ebc660dd985a02a518a1a2beb269b174c7cd25b398dbfb
SSDEEP

3072:tbJfCvBw3WNcmccG6qcSR2uE4mgHiKnQ0kltHBDsgqBDIZetPA3mxPUGj:VJfUB1cmbXqnVE4mg5dctKgqeetA2xx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8890d1f24863939dd22f50bbab023219_JaffaCakes118

Files

8890d1f24863939dd22f50bbab023219_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5a07142f5155875225822caaeca1d7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

TranslateMessage
SetTimer
CharUpperW
GetMessageW
PostThreadMessageW
CharNextW
wsprintfW
KillTimer
SendMessageW
GetDC
DispatchMessageW
UnregisterClassA

kernel32

lstrcmpiW
lstrcpyW
GetTickCount
DeleteCriticalSection
LockResource
GetCPInfo
CheckRemoteDebuggerPresent
MultiByteToWideChar
lstrcpyW
WideCharToMultiByte
EnumResourceTypesA
FindClose
OutputDebugStringW
lstrlenW
GlobalAlloc
InitializeCriticalSection
GlobalFree
GetACP
lstrcpyA
GetLastError
GetModuleHandleW

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ