8da987b629500b405e046ee6b1826aa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8da987b629500b405e046ee6b1826aa0_JaffaCakes118
Size

242KB
MD5

8da987b629500b405e046ee6b1826aa0
SHA1

d7d04a2e4f4b7b9fe4b1b3b97e3fac8d760da298
SHA256

af357dc6507550a21e029c8890675102a4e52a5b317ce321bcc19b5009c860e4
SHA512

ba1b7ac174c721500bc09e064c0363e8cb64ca9ed51b024609831f4a7c73b63d34f058c5f5a3c9dd58dbe616ac12855aff15b2a5bacb1f2c2dccf42cc2a8ab6d
SSDEEP

6144:dIpIaywXNpry94ks/z0tMREk+/o/Q9m5eYjYRhIb:d6MwXDrIgYtMik+Ao9mYnRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8da987b629500b405e046ee6b1826aa0_JaffaCakes118

Files

8da987b629500b405e046ee6b1826aa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f36b6fb73d626cbbf609943556a611f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW

kernel32

LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
LZRead
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer

oleaut32

DispInvoke
OleLoadPicture
VarUdateFromDate
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen

shlwapi

PathFindExtensionA

Sections

.text
Size: 115KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ