8bd3340993d5ede3ad8aac16ddb89440_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bd3340993d5ede3ad8aac16ddb89440_JaffaCakes118
Size

135KB
MD5

8bd3340993d5ede3ad8aac16ddb89440
SHA1

a0f0155a91ce2e1d265da245e638bf3c5401be54
SHA256

f0a532502d29044cae03098e8dceac167b2c54fddbe3cc5a7354c46b3cee0832
SHA512

e8123f0b471fe6e148847e41d5bf03a318c1b596727cc53007fefb57944cded4a51f9092ac1454a5935e1796a95fe493216a14b7967118abe6c03658b44654b4
SSDEEP

3072:B0AyhIdygEsKXh9ES/xHLhQ41FGLVXdNL2O1fPej4P:Xnt5ch9ESNNQ4biLBfPejy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd3340993d5ede3ad8aac16ddb89440_JaffaCakes118

Files

8bd3340993d5ede3ad8aac16ddb89440_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 62KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE