a8b736bc98581d2b9d6aa9959b7f13f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8b736bc98581d2b9d6aa9959b7f13f6_JaffaCakes118
Size

9.0MB
MD5

a8b736bc98581d2b9d6aa9959b7f13f6
SHA1

1662399623723ed6412806987a566c98ed6c18e9
SHA256

abe390f49fe1a5f00f656b6a6ab164a9cb82bef0fddb8ee6a6b24eda178c58bb
SHA512

551aa0dcad321617339e5590b8c19c4414dd61aa4aac28c51c2d4f7cadaadd592be0f968672cb33ae91892985b2d62017616d678134f5557b3f1d49aba74af79
SSDEEP

98304:PshsBeLQztuYrwCiHyvD04zARp4hm5dQrm1:PsqwCVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b736bc98581d2b9d6aa9959b7f13f6_JaffaCakes118

Files

a8b736bc98581d2b9d6aa9959b7f13f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 229KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE