8d240147b37c784835c03c6c6fec33fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d240147b37c784835c03c6c6fec33fb_JaffaCakes118
Size

32KB
MD5

8d240147b37c784835c03c6c6fec33fb
SHA1

f16386f29cbc7e7c9ea50d2ead3a5639fe9fe1a0
SHA256

ded4e7585dafdd5f143fe6b530a6fa8beefccfae8e8d2c297b2888659e95fb09
SHA512

c6f6665af69d3c7153421e818f09ba769455b1c01f0c745a5c9d97a181ced79ebef26e31994f2eb29615b6083f285c792c0b185ed972143ca226cb4bd7c90e96
SSDEEP

768:36UJcDaUGqPityIiLs4uFelZc85zlWEfpv26U:3DJcDaU1PiyNZouJ5hWEfpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d240147b37c784835c03c6c6fec33fb_JaffaCakes118

Files

8d240147b37c784835c03c6c6fec33fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

005dfcdb1e521822d4093f6d199f2f7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SendMessageA

gdi32

SetBkMode

advapi32

RegCloseKey

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 23KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE