8cc3646bbc95ac8a6539f2916ee309af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cc3646bbc95ac8a6539f2916ee309af_JaffaCakes118
Size

354KB
MD5

8cc3646bbc95ac8a6539f2916ee309af
SHA1

0fd3885ab3863a3366cbda82dd70584123c4c1b7
SHA256

f44fabd94ba50febf9662efc2cf85793ad18f7d2339bb56f3729ece90e07860d
SHA512

4f4ba214384409019d3377d7bf57a9438bb9c8045db71ba65e4b72c5682426369de480ff591a4739212fb7df2f06f41902970dce04b72c90868a2b9bed2c3e5c
SSDEEP

6144:F9wNltisMM0bC3DSE7yeOVjZVGoCkEzxahU+hr7kLnVSSXEs0HGsBsvxdlEg:F0tiLMj3D9yeOVbGoCkEgu+Z4LzEs0mX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc3646bbc95ac8a6539f2916ee309af_JaffaCakes118

Files

8cc3646bbc95ac8a6539f2916ee309af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb62014e897b9a10cbda64c49335d31a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SetErrorMode
CreateMailslotW
EnumCalendarInfoA
FreeLibrary
LoadLibraryA
IsBadCodePtr
UnhandledExceptionFilter
GetEnvironmentStrings
GlobalFlags
GetWindowsDirectoryA
VirtualQuery
SetHandleCount
LCMapStringA
GetModuleHandleA
GetTickCount
InterlockedExchange
LocalFree
InterlockedDecrement
LocalAlloc
GetThreadPriority
GetCurrentThreadId
LockResource
GetVersion
CloseHandle

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromUI8
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

userenv

RegisterGPNotification
UnregisterGPNotification

Sections

.text
Size: 231KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE