b8439dd451fe0e824f24feb8208fb32c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8439dd451fe0e824f24feb8208fb32c_JaffaCakes118
Size

344KB
MD5

b8439dd451fe0e824f24feb8208fb32c
SHA1

9b7ca48f1a0044c279af4245a4daff6ac0979191
SHA256

5ed340540b9510846c9505a3f646678ccfa19bd53fc93c5d1a70cde414dddb52
SHA512

3d4cc53d141b9dbf0e4e8728dd7486498b8ae2f68c35aa6f0c76a3ee53b8dfafe0536bae67586e001a723e30fcdc172a138b35471b1b039b29c11f9ed1be075c
SSDEEP

6144:qBKJohTHk1EIIl68R4fbksE/Qwit80+4UNV0Up+nETrsVGy3PwI:9JmrCE/69fIV/FS8GUYQsV93P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8439dd451fe0e824f24feb8208fb32c_JaffaCakes118

Files

b8439dd451fe0e824f24feb8208fb32c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5cb147a043775fa995dbb94670cd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ