c8991da25b7426fbf5d7e1c8b5d636a9_JaffaCakes118 | Triage

Sharing

General

Target

c8991da25b7426fbf5d7e1c8b5d636a9_JaffaCakes118
Size

354KB
MD5

c8991da25b7426fbf5d7e1c8b5d636a9
SHA1

407c15afba33c8dc6a05437b8f74d464b492b344
SHA256

c6fc77da4d06b4d8a8c87bbc31d71ff14edbc78dbcc9e8e3915458ea199526b1
SHA512

003eb861c1379187855b1b26ea493e6ed455fe03166142a066f303b066a6680426886c7eb9cd7804d73c2b3c851687ffbca088c6b1b2c74095585aff74a5e223
SSDEEP

6144:F6h38fyPIAGl7fomtUvi1umIUIdrJ/B3Xnj61l2PiD:EO69GqOMBJnJJDHiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8991da25b7426fbf5d7e1c8b5d636a9_JaffaCakes118

Files

c8991da25b7426fbf5d7e1c8b5d636a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

193ddcac0a7502c98e27a0c863ea47ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
FreeLibrary
GetProcAddress
EnumCalendarInfoA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetFileAttributesW
GetTempPathW
GetTempPathA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
GetModuleHandleA
UnlockFile

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 233KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE