8f001cc74629fbe9a52a36b6cdbd4250_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f001cc74629fbe9a52a36b6cdbd4250_JaffaCakes118
Size

56KB
MD5

8f001cc74629fbe9a52a36b6cdbd4250
SHA1

4ecda85789215aa8354ba96ec30bb849adc13bc4
SHA256

c3975fb533ed3d1999a9918a80adf099a3b9a6ef9884b9e741a03435746ccd97
SHA512

77c4900ae165c8530494eeea80abae19c519a48651be0d9b8bab188c9cac3b885db7c088207aae8ba61f21d45e8c012b455a7b0f685a028b83a5d55ad0a8633f
SSDEEP

1536:wxblOFREzIdOujwJGnfiVe8prinn6IVNEciW4b:clOFRAuHfae8ZOFKw4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f001cc74629fbe9a52a36b6cdbd4250_JaffaCakes118

Files

8f001cc74629fbe9a52a36b6cdbd4250_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e5d3a5de84c06e89069c73b4022bf2d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EndPage
DeleteEnhMetaFile
FrameRgn
PtVisible
SetLayout
SetPixelFormat
EnumObjects
CopyMetaFileW
AddFontMemResourceEx
SetTextCharacterExtra

advapi32

EqualDomainSid
AccessCheck

crypt32

CertRegisterSystemStore

kernel32

GetLastError
SetThreadAffinityMask

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vzdnxrd
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ