b8d0a73734e0e9118a3e84a19981b1c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d0a73734e0e9118a3e84a19981b1c9_JaffaCakes118
Size

158KB
MD5

b8d0a73734e0e9118a3e84a19981b1c9
SHA1

0754cc88ba4ec836a9b57a7544e5da47151b382b
SHA256

910b4253400195615b6594aa45c84e99e0a2aa9d536e09924c3f580ea15458d3
SHA512

886e813123f1c9ddf7694c745d517fbbd8d6bf1647cf0f641bef6e1d2fe77aa216dec4ee395fea6a732865aecd09b6192323a4195a57cc10aa767cf8f79def32
SSDEEP

3072:XMsfFWKC4CT7gMpfT3cyZZJv4WQwlZ6lqZSmoTbf7N7:XMsh0J3cYZJvZllg97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d0a73734e0e9118a3e84a19981b1c9_JaffaCakes118

Files

b8d0a73734e0e9118a3e84a19981b1c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac8a030fd7840a2231340810a2729225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ExcludeUpdateRgn
ValidateRect
ValidateRgn
GetWindowInfo
SetCapture
GetCapture
ReleaseCapture
InvalidateRgn
GetUpdateRgn

kernel32

FileTimeToLocalFileTime
SetCurrentDirectoryW
GetNextVDMCommand
FreeLibrary
SetThreadPriority
GetStringTypeW
CompareStringA
GetLocalTime
FindFirstFileW
LocalFileTimeToFileTime
FindResourceW
SetErrorMode
EnumResourceNamesW
SystemTimeToFileTime
RegisterWaitForSingleObject
GetShortPathNameW
FileTimeToSystemTime
FindClose
FindNextFileW
SetEnvironmentVariableW
LoadResource
SearchPathW

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ