8d49c56b31fe851309bc8b2d342ac967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d49c56b31fe851309bc8b2d342ac967_JaffaCakes118
Size

124KB
MD5

8d49c56b31fe851309bc8b2d342ac967
SHA1

28a5e3629079e05b70ebbf7df13796b5b728de19
SHA256

c325f86e7209f4e0a94667f9fa12fd00a50fc5d3f441c8b2ee55f6a2ee5d6505
SHA512

709ce55b2c9fd0b8e42d0e91d61825acd78f8d37eb460b3d798f91a3285769df36e9eb238a49f27c9e3a3d25609bfbed74f717b3d03cdaf2ee6ba6cc0379a826
SSDEEP

3072:Q81u6hFFwWyDAooARl3bc3DCe/owzaZoo:zu6PuWyeAjrYWejo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d49c56b31fe851309bc8b2d342ac967_JaffaCakes118

Files

8d49c56b31fe851309bc8b2d342ac967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 78KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE