8bc335cbc9a5a43a198e063914574328_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc335cbc9a5a43a198e063914574328_JaffaCakes118
Size

49KB
MD5

8bc335cbc9a5a43a198e063914574328
SHA1

2fa89ad834a1e388b7e594d9bc27abaa1e368d4e
SHA256

c8ea253d152db31f4ea88a0503b364662d4bed59b6e6d762475e2c3eafe8e747
SHA512

4d945ab5108350de12fb1cdd38d4c635927e4629504c0e096847a9cc208e47d31f9163d46977b835d7486487a3c01ede6a8a21a5629b806219efb5d4da06db61
SSDEEP

768:WWrV+Z5UrUhupTCiIMMuAOCxI8niSXJjsmo0m2W7OGGU+RzgHjMs2LGLEgLv9It1:9ymALVBpni8j4mGGyjMs2MEgLv9QHFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc335cbc9a5a43a198e063914574328_JaffaCakes118

Files

8bc335cbc9a5a43a198e063914574328_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5444b32f4b8492425b8f50c9182933e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

Sections

.text
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE