8cf0cc9e088bf452d225fe755ac9d98b_JaffaCakes118 | Triage

Sharing

General

Target

8cf0cc9e088bf452d225fe755ac9d98b_JaffaCakes118
Size

177KB
MD5

8cf0cc9e088bf452d225fe755ac9d98b
SHA1

acc99646e663e4abe71cd023fc3c5e7b61ab93ab
SHA256

5e74d513191066c4a0d05112c819bf0e35f780dc593c5a7b1d3dd455cd20c05c
SHA512

42f26b96cfcac4d34249a9b7e29ef9788b60fe531bfd4ae998a18ffcc137d442ac803054a2093e452df2126ac28d5509dd0cae707f235eb85aea8d53d5e98306
SSDEEP

3072:LpqspD4+XqI8suTczRvfeom9b3d4T7cH8ydnCTglr5w0VTc8bd3eNfI8bApt7:XD4+aIdNW9bt4+8ydCTglr7J3e23d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf0cc9e088bf452d225fe755ac9d98b_JaffaCakes118

Files

8cf0cc9e088bf452d225fe755ac9d98b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a2ecc8c4cee5b23709bcf0c83db017a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

kernel32

FlushInstructionCache
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
EnumResourceNamesW
OpenWaitableTimerW
DuplicateHandle
FindResourceExA
FindFirstFileA
FindClose

shell32

Shell_NotifyIconA

shlwapi

PathFileExistsW

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ