8a36d812d10ae4b53cfc29924d060bcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a36d812d10ae4b53cfc29924d060bcd_JaffaCakes118
Size

35KB
MD5

8a36d812d10ae4b53cfc29924d060bcd
SHA1

6fe2fc57285abbec621a1644b9a4f0a39b7d98ed
SHA256

b1f7ca7b71b85984aab9dcb7938d5036da00617b880bf5f3ba29957954c8226b
SHA512

83e47c1146ab2754c11f7e2007bfb3841b46c5a5588a381edfc26ea93bccea0843d69f85a1d79d071fcd49c538e78ce34079212e223510c70e03f28a3b71c33a
SSDEEP

768:AjiKLtAoD1xTBxqBhd5wfMTHSj+tulIY+dSDI9pBTJ2bbrysmp7O9x:Aji6AoD1xTBxqBdwUTHSjouIY+bvBT+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a36d812d10ae4b53cfc29924d060bcd_JaffaCakes118

Files

8a36d812d10ae4b53cfc29924d060bcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ