8d1664e23d620078d4df3c98d2f091a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d1664e23d620078d4df3c98d2f091a4_JaffaCakes118
Size

67KB
MD5

8d1664e23d620078d4df3c98d2f091a4
SHA1

c2f3483938f96cb87fe42513f551dc27de6c3cc6
SHA256

4380de9499bc9b7975b562045fb15e8c92aca8b33443ee0962128e7b33d592f6
SHA512

2223208ea49bb3abb29a0f274503b83852b23ccff00db45afc8ce2acc1471e872847c74f5771136e57793013fa415bb012061c46c6fff6be4d5fb682d1ebc3cd
SSDEEP

1536:anYvXTMGQrwMsaTlsyEpF4ZcY58mtYmiBaVIUHTqAg:Bvo+MsElNEv4aaZKBWIUHTqAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d1664e23d620078d4df3c98d2f091a4_JaffaCakes118

Files

8d1664e23d620078d4df3c98d2f091a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f1dd65201f0c19f18067dd140b7645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetStartupInfoA
RtlUnwind
GetModuleFileNameA
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

msimg32

TransparentBlt

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ