8b6f0f320c8f25096945328491af54f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b6f0f320c8f25096945328491af54f5_JaffaCakes118
Size

319KB
MD5

8b6f0f320c8f25096945328491af54f5
SHA1

3d6642a35b21af8c2ce65eab8ff360e850d98b86
SHA256

517a05faa56cbe10e3be1b5ab01b6b2ac7da1c52016a08294c11278af692435c
SHA512

4a502bc25c374a9cd74fd06c193bb34f15a95c9ca79a5e28f6e477382f2581dd3030371468fa8f9c1dc39ecb41b696a37f3413f486366ebf518b6ac0eafbbc04
SSDEEP

6144:Mwnwn4+IBRaQP1fqaZzdl1VOH4SigSt/Yk/yX0S8R4w:MJUBc2q0PcDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b6f0f320c8f25096945328491af54f5_JaffaCakes118

Files

8b6f0f320c8f25096945328491af54f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a0fd466ae9ce57107e065d7fe31afa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateThread
GetComputerNameA
GetCurrentThread
GetFileSize
GetModuleFileNameA
GlobalAlloc
GlobalFree
LoadLibraryA
OpenEventA
ResumeThread
SetErrorMode
Sleep
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

InflateRect
GetWindowLongW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 305KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ