c8996247bd18b568840f953b1373a4a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8996247bd18b568840f953b1373a4a0_JaffaCakes118
Size

140KB
MD5

c8996247bd18b568840f953b1373a4a0
SHA1

0e2f2c0d698e3eb169bafe18edb9555ebdfe4eac
SHA256

79f06882c9b0e4f693690ec04429ba5ce4c80a974472eb2feadeff5715567ba7
SHA512

7bef2d73eb9bf7ae8b4c90f761e70423efb6236291a6ad11dbc33bcdb31cd147d6b707aac82d6311b79c84bdd6880f9c05871ef0694700a4b11a894fbded2178
SSDEEP

3072:lH5jg+v8LIDjyR3oiMYurzcUQmSUIH40zaYDVfBGOT2xO:x5jgy8sjnYcDQmP0z5DVfDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8996247bd18b568840f953b1373a4a0_JaffaCakes118

Files

c8996247bd18b568840f953b1373a4a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3924f38c6894c3586ac9b332e47ceffe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateIoCompletionPort
LoadLibraryA
CreateNamedPipeA
GetProcAddress

user32

TrackPopupMenuEx

gdi32

GetTextCharsetInfo
GetCurrentPositionEx
StrokePath
OffsetClipRgn
CombineTransform
SetGraphicsMode

Exports

Exports

qhszpxkautelk
rujyqmmdpztsrvb
rwcmfiqytz

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ