8ac3d6b031e5cc3629fa87053b898d59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ac3d6b031e5cc3629fa87053b898d59_JaffaCakes118
Size

113KB
MD5

8ac3d6b031e5cc3629fa87053b898d59
SHA1

c673c93f1b94e2c562dc0b700e13dc43402f0153
SHA256

1778f117bb70584ac7643f943cba0d9903b19f30c9b923fd509ff3cd3ca2b217
SHA512

c42a9e093d53ff6b0fc5f3d3c43c3a04e25a82f3a7035ed42cc3b0309500c8d42750b0ceead917cec6becb87253a0f26d07ed92d2ee18883fd085662f4441127
SSDEEP

3072:jC9tsuQ6VPeDZ1Ldqqn2momYohv0ENK6pnm0VW:jC9Gv6VPeDtqqDomBh8I3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ac3d6b031e5cc3629fa87053b898d59_JaffaCakes118

Files

8ac3d6b031e5cc3629fa87053b898d59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a66849fa3ced1b03619e81ed92ec6aa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetContextToken
ReleaseStgMedium
CreateOleAdviseHolder
CoReleaseMarshalData
GetHGlobalFromStream
OleCreateStaticFromData
CreateStreamOnHGlobal

kernel32

VirtualAllocEx
GlobalAlloc
LoadLibraryA
DeleteCriticalSection
CreateThread
DeleteFileA
VirtualAlloc

advapi32

RegEnumKeyA
RegQueryValueA

user32

IsMenu
CreateMenu
GetMenu
CreatePopupMenu
CloseClipboard
CharLowerA

Exports

Exports

qZJvN0DHfAglQk@12
1NTozlSmUg
k0t59rpNKwzt
KoXl15bUU7@4
_dmLYa
_Jujj42K2b2uxbI@12
_Far2PbZS
ewBUnNvSG@24
_KM2SIJH@24
_92L3PDepy7
KlnwOMGbX
KJrUez
_9qdxFqsP3T5SX0
_pIndRYfN6LZ0x@8
_CQhzskvLSZ2
_H0Pn_
_zoMIQGCPfsFmW
x1cIS@16
_PsdJN5KJI@4
_CCmp2VEkHqxozD
BXehmLK9VFN1Xh
jZpXHqs6
mGg3q4Pz4
_jPNARH@20
23B40@8
zKLfjIAJu@16

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ