8b1c8c837c99cb6c61f54862f66af663_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b1c8c837c99cb6c61f54862f66af663_JaffaCakes118
Size

31KB
MD5

8b1c8c837c99cb6c61f54862f66af663
SHA1

0bcc13c2b12659ef303b2e9c00269d8a3aeb713c
SHA256

1a30f4f3d2ef3595f6a5247a3156dee0e70f2f205fd2cbac0602fb47aeb5aee3
SHA512

ac7bb7447d91f19f631781edcc242927cfa54567ddafce96ec1a15ae3d8ca98c926265d6b70c1eec8c726d29b5a62739f0d684078789ec53039788a2b0fa91f5
SSDEEP

768:9fAhYMVOn5GP1QqALPIkqVu4laimjutWCx9OD5PdGN2:9IhYj5HLPIkou4gtu4xpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b1c8c837c99cb6c61f54862f66af663_JaffaCakes118

Files

8b1c8c837c99cb6c61f54862f66af663_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d4f500475139d285c2ab26f9754254b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateThread
GetCurrentProcess
GetProfileStringA
GlobalUnlock
InterlockedExchange
IsBadCodePtr
LoadLibraryA
LocalFree
Sleep
UnmapViewOfFile
WaitForSingleObject
lstrcpyA

user32

CallWindowProcW
InsertMenuW
InvalidateRect
IsIconic
IsWindowEnabled

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ