8d55e1ff8c4835c9bcd8a3b41b934b0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d55e1ff8c4835c9bcd8a3b41b934b0a_JaffaCakes118
Size

179KB
MD5

8d55e1ff8c4835c9bcd8a3b41b934b0a
SHA1

24b09ac3cb6a69efac01e65e96886c4eb235c985
SHA256

9ba877ff22fd1eeeede63ee10460bdb169775c3e60fa7fa4d7b845db2a2f138d
SHA512

fc0202e1f310d07117c3608a5e23e5c416c658f9f7ce59ba2b070cf15e3c5b16c507afe100e2d56c189aeaed3efb351e687d0ee4269ca1dda7a3dde928f703f3
SSDEEP

3072:ymR9ZjOizLLVH4KYacIROxmQVr2vhv63+gWGRoy5+2agNiKdP:19oyLL5cIRQr2vZE+gXoys2av

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d55e1ff8c4835c9bcd8a3b41b934b0a_JaffaCakes118

Files

8d55e1ff8c4835c9bcd8a3b41b934b0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bfeb16eabda2c06d4f9ceb6d0992973

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrByteCountPointerFree
UuidCreate

shlwapi

PathRemoveFileSpecW
PathAppendW
PathCombineW
SHGetValueW
PathFileExistsW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetThreadContext
GetCurrentThreadId
FlushInstructionCache
SetLastError
CreateFileW
DuplicateHandle
GlobalAlloc
GetLastError
ExitProcess
GlobalLock
WriteProcessMemory
SetLocaleInfoW
GetCurrentProcess
GetVersionExW
GlobalUnlock
VirtualProtectEx
WaitForSingleObject
TlsSetValue
GlobalFree
GetTempPathW

winmm

timeEndPeriod

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ