8b9fc8f9e3fc30362ae5e4bf920a5c42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b9fc8f9e3fc30362ae5e4bf920a5c42_JaffaCakes118
Size

344KB
MD5

8b9fc8f9e3fc30362ae5e4bf920a5c42
SHA1

a418e453ec6015f7cc79c394acf8d2332948de1d
SHA256

8d0107d2728585dc0bfd519b6b649541407e9cdee77d47994d22cf03a279997f
SHA512

8788efaffb5fa8708c9b5eac63cc5c8aa6c12b4989b337a51475f09aed27fc38292e38f7c8e2b9edc60c37345681298976b0b9c12750eccaec896fe18c0d6298
SSDEEP

6144:prOYeg8hY2Uw/M9sKBsEhPSVqW6kti4zDDcyMHKi4OTxXVmev+4nrY2OM5t:U7g8hYLa/4SVN6EzPcyMHKBOTxlmev+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b9fc8f9e3fc30362ae5e4bf920a5c42_JaffaCakes118

Files

8b9fc8f9e3fc30362ae5e4bf920a5c42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5cb147a043775fa995dbb94670cd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ