8b5c484d807745f8487fb77d92f6b1f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b5c484d807745f8487fb77d92f6b1f7_JaffaCakes118
Size

189KB
MD5

8b5c484d807745f8487fb77d92f6b1f7
SHA1

00fa76ef21432c669c5a930ac526b2393c6618a6
SHA256

804d4b1760bb8ffced657682bbcdff60dbccd3f9e8fe078bf281b7daf73d6cd3
SHA512

bc6c213f7a968be055c046c479572206fa793a2ae047f131a0baa14b605e1d4359595d433350d051eadd24a95d6959bc6052d0617989e01a1e377c632a1cf211
SSDEEP

3072:WO3UXeFDKUaq5REKxrz27MvzrpD/cmPT+Fmmg8lwLnYyVfeENfE7nlGuIq:WrXeZbB7xnVvzrpD/cmPiF1lKYYfRNfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b5c484d807745f8487fb77d92f6b1f7_JaffaCakes118

Files

8b5c484d807745f8487fb77d92f6b1f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

039640841527cb37bad2797cddadfac2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
SetFirmwareEnvironmentVariableA
GetModuleHandleA
LocalAlloc
LCMapStringW
DeleteCriticalSection
GetSystemInfo
LCMapStringA
GetProcAddress
EnumResourceTypesW
LoadLibraryA
LeaveCriticalSection
LocalFree
GetShortPathNameW
GetLastError
InitializeCriticalSection
SetStdHandle
GetStringTypeA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

winmm

timeGetTime
timeSetEvent

gdiplus

GdipCloneImage

ole32

OleTranslateAccelerator
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ