8b7ec1c0292d673dc5641e1c1528eb9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b7ec1c0292d673dc5641e1c1528eb9c_JaffaCakes118
Size

86KB
MD5

8b7ec1c0292d673dc5641e1c1528eb9c
SHA1

15ba96ac42b98a43a53407dbb98c19cc1b95a137
SHA256

f49f414c65fd5d477790653b2b1203244d83f1af28df6e4870abbe077f723664
SHA512

661434ba044066d3daf99e3f158286dd91749a7493411baeefb311a1a73becbf7d113b3ccdc6cc9f6b41a96e6c36b9c00330a9755e826a7ca5851d56f79d8256
SSDEEP

1536:/GRSsdMRSYS9qs5mz8JeLeuZyJ+x/c9RzZYHh9mepiKkx1P1usQ2:/GRNdMRXs5kP/c09Mtur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b7ec1c0292d673dc5641e1c1528eb9c_JaffaCakes118

Files

8b7ec1c0292d673dc5641e1c1528eb9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6fce181d8b9814b8cbe1ff0f1ceea48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentThread
GetProcAddress
LoadLibraryA
CreateEventA
GetVersionExA
VirtualProtect
GetCurrentProcessId
LockResource
GetCurrentDirectoryA
FindResourceA
LocalFree
GetSystemDirectoryA
GetStdHandle
ExitProcess
GetComputerNameA
VirtualAlloc
GetWindowsDirectoryA
LocalAlloc
LoadResource
GetCurrentThreadId

advapi32

GetUserNameA

user32

GetActiveWindow
GetForegroundWindow
GetSystemMetrics

msvcrt

memset
memcpy

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ