c8589cd9472db211e36024425901eaa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8589cd9472db211e36024425901eaa8_JaffaCakes118
Size

148KB
MD5

c8589cd9472db211e36024425901eaa8
SHA1

f6968c2511e337a97f39060ffd2eaa213d8e8da9
SHA256

98cabb7fc026d3a00dbd28b5076a223997f8b3d2295754b0cc54cbcd05fc4d92
SHA512

b144eae1f85f52b54bd24f2155e51aea51380e95e124abbf7e8888c12e0641a519c2fe3da7b2a37382e9d0244b0c76f41a5de8ccb26b70e42b992c54b30320b1
SSDEEP

3072:vWVzNMWeiOkiO+B9keEXrKhS/I5RnB6Oeu2YwMmu4Kb+0ffD4:vCMWViO+8F7pQz6tu2YDbjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8589cd9472db211e36024425901eaa8_JaffaCakes118

Files

c8589cd9472db211e36024425901eaa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ba5cbd1f3b4cab61787793a061f02fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
AddAtomA
VirtualFree
GetModuleHandleA
VirtualAlloc
GetProcAddress
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ