8ee4b4c58b47d5cfab82eafaa8eb0e74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ee4b4c58b47d5cfab82eafaa8eb0e74_JaffaCakes118
Size

37KB
MD5

8ee4b4c58b47d5cfab82eafaa8eb0e74
SHA1

7c3e92ad09aa48842b47fbb5d382c749cfc8aa8a
SHA256

69a5227f62edf2a59f0326b405fc1e2348d6b2b4018b7a2a61efb394747f882f
SHA512

427d8e2c949c979f310428197bed87ce4e3a2a34177bc45ea904ee0f332b64db0e530478b320c45ed18a17978a76615725800e2c5af7c88e914adde944ac13cc
SSDEEP

768:zWizfpE9SiFUOtYcNAscbr+avaVf6i4uivNUm:zWIfpE9SiFBcbrEViiIvN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ee4b4c58b47d5cfab82eafaa8eb0e74_JaffaCakes118

Files

8ee4b4c58b47d5cfab82eafaa8eb0e74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dc12e7e28bf107fdedffb04b0387c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
GlobalSize
SetCalendarInfoA
HeapUnlock
RegisterConsoleOS2
AddAtomA

user32

TranslateMessage
DrawMenuBar
DdeCmpStringHandles
RegisterMessagePumpHook
ChildWindowFromPointEx

gdi32

CloseEnhMetaFile
GetEnhMetaFilePaletteEntries
SelectObject
Polygon
EngCopyBits

Sections

.text
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE