8cd60ca0e493dab1011f184395e10339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd60ca0e493dab1011f184395e10339_JaffaCakes118
Size

15KB
MD5

8cd60ca0e493dab1011f184395e10339
SHA1

9cf772fc14bde681ae78201de1dc33dd1a2c39e9
SHA256

f2f49e4fe730ea942a4fb01374c3b04fe7f61d333eb6188d70733fc031bb504b
SHA512

8f4fab1ce796791c9b6a57ed26261da76707eea50bdce99010da2af0b10a3a5c51d422f983a591f7e91ac471b04858fc0736fdcc075248f1e74f5cc82d89f15c
SSDEEP

384:+5pctYeKIOBzMA4Tf2CL7jifNdniuw2xU+oK:KpctYEKMA47dL7jifNd1u+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd60ca0e493dab1011f184395e10339_JaffaCakes118

Files

8cd60ca0e493dab1011f184395e10339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b60b2f93c0fea16c7e66c9e0b5d662c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCurrentProcess
GetProcessHeap
GetFileAttributesA
CloseHandle
GetProcAddress
SetFilePointer
CreateFileA
lstrlenA
GetModuleFileNameA
PulseEvent
LoadLibraryA
lstrcpyA
CreateEventA
ExitProcess
WaitForSingleObject
SetEvent
WriteFile
ExitThread
GetVersionExA
CreateThread
GetTempPathA
ReadFile
lstrcatA

user32

DispatchMessageA
SetThreadDesktop
ShowWindow
PeekMessageA
CreateWindowExA
TranslateMessage
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
wsprintfA
BeginPaint
CloseWindow

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ