8ef9bd4fbe1be4e1f06812fc0995bf81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ef9bd4fbe1be4e1f06812fc0995bf81_JaffaCakes118
Size

372KB
MD5

8ef9bd4fbe1be4e1f06812fc0995bf81
SHA1

76b31b92948772df7347313968995d8669277c6b
SHA256

bb0706d1076ecd0621080a8b3bedb3813961b153c433f69bb156762ff8c5733e
SHA512

23323222d0a47a9e2de8b3bfb6e1a2275d28a0a96c35b058882beeccaed1c20453e116fb062d72eea6fe17e5353ecb8a2dae5709bc38cf1c11956e0a04e2305d
SSDEEP

6144:KW9jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:KWNvjVkCrSvoZNyl5fwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef9bd4fbe1be4e1f06812fc0995bf81_JaffaCakes118

Files

8ef9bd4fbe1be4e1f06812fc0995bf81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7300314768e9d66e69570801e3c19ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetDriveTypeA
LocalFree
GlobalFree
VirtualAlloc
CreateFileW
GetComputerNameW
GetLocalTime
GetModuleHandleW
FreeConsole
SetEvent
GlobalSize
lstrlenA
FindVolumeClose
GetTickCount
ExitThread
GetPrivateProfileIntW
CloseHandle
ReleaseMutex
ReadFile

user32

DrawStateW
GetCursorInfo
GetClientRect
CallWindowProcA
GetSysColor
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
GetKeyState
GetMenu
SetFocus
DispatchMessageA

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ