8d9b1b84a38f76ed88648be10aaf4f50_JaffaCakes118 | Triage

Sharing

General

Target

8d9b1b84a38f76ed88648be10aaf4f50_JaffaCakes118
Size

278KB
MD5

8d9b1b84a38f76ed88648be10aaf4f50
SHA1

0ac60b09d8966a8a2f4b3482c6a1b56da93ff6c1
SHA256

e22d0123b7d3b6f2c8826ae3e844b0e2c7d5eaaf3589b71df425a7588f3cce11
SHA512

2b5b7de1e24b26319a2e510c52bd9184ba70f7573208e1899bd6574663f2321fd1da1ebe63803078a5de94b0d4c186afe8e7f74946d3df13b4edf0d555d46261
SSDEEP

6144:Y5TgHm7xkACdT8SoWOgJl1nOtFsv42ZpDR1pZdEn/SE/Eo7NW:Y5jbg8YHl1nkFsQObZqnaE9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d9b1b84a38f76ed88648be10aaf4f50_JaffaCakes118

Files

8d9b1b84a38f76ed88648be10aaf4f50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abfb697154be86c623b3989e99249b33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
CompareStringA
DeleteFileA
GetCurrentThreadId

user32

BringWindowToTop
CharUpperA

advapi32

RegCloseKey

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE