8e62cba68484a355040abd4189f3a1d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e62cba68484a355040abd4189f3a1d9_JaffaCakes118
Size

153KB
MD5

8e62cba68484a355040abd4189f3a1d9
SHA1

777022a9ad4988640686f0a0ca7bee5465e9c0ee
SHA256

a069b8167f6041f4bf7fdec98083b5fad82f50a72a07eaff65fbb837c3be6215
SHA512

3ea3fc39cf558cf983a77d82276e8e65c10b939971ca30fee8973dd782d3edaecdfeeb36ca7b4c4e0c6b9f625a7a6c8679d36076655c7e60080e898661a591f1
SSDEEP

3072:mctaVqeXpoffVi/JG6SZFDc/7vGmKiSar8GwQRoVJTr7PfqxJX:mzj5offViBGm7vGTaUQCDTr7PyxJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e62cba68484a355040abd4189f3a1d9_JaffaCakes118

Files

8e62cba68484a355040abd4189f3a1d9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0f2d1c2fa0b2fdd4f1c86fe6d45b481d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
ExitProcess
GetACP
GetConsoleMode
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
UnmapViewOfFile
WriteConsoleW
lstrcmpiA

msvcrt

time
__p__commode
_cexit
_except_handler3
free
malloc
sscanf
setlocale

user32

EndPaint
EnumWindows
RedrawWindow
IsWindowVisible
DestroyIcon

oleaut32

OleIconToCursor
VarBstrCat
VarBstrCmp
OleLoadPicture

shlwapi

SHDeleteEmptyKeyA
SHDeleteValueA
StrSpnA
ChrCmpIA
PathFindOnPathA
StrStrIA

Exports

Exports

CoRegCleanup

Sections

.text
Size: 74KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ