8cc0a78cce20b102f35aa0eb3c3393aa_JaffaCakes118 | Triage

Sharing

General

Target

8cc0a78cce20b102f35aa0eb3c3393aa_JaffaCakes118
Size

230KB
MD5

8cc0a78cce20b102f35aa0eb3c3393aa
SHA1

e123e38869ac158548cb2a010c6335c033d04a5b
SHA256

82296ec85d2c346db61ca0fa53fe99b4fd9cae8b98e580a901e21e001b96e496
SHA512

5e75bc812a1f06e937b4a44e6b0b2dad4e35c89bdbdc48a54527661eb3e0b4106abde21b1c03ffa58a18b4320049b01aecbbe96521d73e84c146e70c5a9d257b
SSDEEP

6144:FVWBsSa/g4htoz1y5iirwg5e5sZ3vb17rnx:nWBZ4voz1Zrg5mm3Zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc0a78cce20b102f35aa0eb3c3393aa_JaffaCakes118

Files

8cc0a78cce20b102f35aa0eb3c3393aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2f43e904b8a395d70705a0b389f859ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetACP

user32

FindWindowW
IsWindowEnabled
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW

crypt32

CertOpenStore
CertCreateCertificateContext
CryptDecodeObject
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
CryptEncodeObject
CryptQueryObject
CertStrToNameW
CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

odbc32

SQLFreeStmt

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ