8cdc36d682bf60bbdc1ecb7adc22ec1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cdc36d682bf60bbdc1ecb7adc22ec1e_JaffaCakes118
Size

348KB
MD5

8cdc36d682bf60bbdc1ecb7adc22ec1e
SHA1

c3325bc04504c1171b8c0ab2d4db4b94af8879a0
SHA256

ab6d3f1fcc5f5dc7c8cb772cacd4df5b145ef619cfed4a5b36e67bd1010c255e
SHA512

2754e2b0885f6cc9369a160b67da08dbe0e012b9b33fa4103df6dc047297be125c9074319d451a79ed360efba3695fac6462958c5851daf2de60559d97996f5c
SSDEEP

6144:h3XcWj53vTIMGvFnsPkcvnTPZDoolFf81jX8AS1mC2Czg6NPLMoL:5X1N/TIfFnm5vTPhLa1jXN76ZhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cdc36d682bf60bbdc1ecb7adc22ec1e_JaffaCakes118

Files

8cdc36d682bf60bbdc1ecb7adc22ec1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e54e99b02c38bff0879cfd75a5276944

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
Sleep
GetCommandLineA
ResumeThread
VirtualLock
CloseHandle
UnmapViewOfFile
GetProcAddress
GetModuleHandleA
GetTempPathA
VirtualAlloc

user32

wsprintfA

advapi32

CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertCloseStore

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 188KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ