8df263c27f790c19cc139d4a670cc967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8df263c27f790c19cc139d4a670cc967_JaffaCakes118
Size

332KB
MD5

8df263c27f790c19cc139d4a670cc967
SHA1

70f0194b1a48854a4aa8847ce311685b41e2ec70
SHA256

6bc10864f46d1099416c31ae6c7e6ab16c0294d8e2a518d554c34d50f7f8cc34
SHA512

599ebcff1b12c9b44db5eb800c682a49f146d1484b05fe64402bfc3b856044129b162ad9d982c8ca06c2747aedba75fd57e2d838defc6b7bf500eec12169fc3c
SSDEEP

6144:amRAD+9BZzZTGw5fMVcK9AE3mpzsteFbrp9hQvmH+blG3mbczw:amRAKOwtM0EMwtQDhQvY+w2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8df263c27f790c19cc139d4a670cc967_JaffaCakes118

Files

8df263c27f790c19cc139d4a670cc967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0beddaf5f74d404f378f9f15a2d79129

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GetLastError
ExitProcess
LocalReAlloc
Sleep
GetProcAddress
GetTempPathA
VirtualLock
OpenSemaphoreA
CloseHandle
UnmapViewOfFile
VirtualAlloc
GetModuleHandleA
GetCommandLineA
InitializeCriticalSection

user32

LoadAcceleratorsA
ShowWindow
GetClientRect
wsprintfA

advapi32

CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertOpenSystemStoreA

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 180KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ