8d31bf5ec7e0d4c508693e896e70447d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d31bf5ec7e0d4c508693e896e70447d_JaffaCakes118
Size

1.8MB
MD5

8d31bf5ec7e0d4c508693e896e70447d
SHA1

f6bd025a0c10e2d6e67994f05e9b18c569c05512
SHA256

da1f7748173aada51a090929a97e70bf724fdf80decf66735dd53b0ae3da66f1
SHA512

0b17d250418019a381a01fe957b1e271d5134d9086e02af3575c3c959d98eb2f113903358ac545ad2f231a948b7371af71d30f3e7d3564abd2da8967354c9b1a
SSDEEP

49152:OfxDQn9AMFXlF5HzREfysxlmgPuEGiqXhNhYq9:OfxE9AUPlRmhlmgGEGish5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d31bf5ec7e0d4c508693e896e70447d_JaffaCakes118

Files

8d31bf5ec7e0d4c508693e896e70447d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6b9ae03e57092d986e99ff9d29dc2c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DestroyMenu

gdi32

SetTextColor

winmm

midiStreamClose

winspool.drv

OpenPrinterA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

connect

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedate0
Size: - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.sedate1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE