c8c1f36f80f8b30cdee0d119cf442335_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8c1f36f80f8b30cdee0d119cf442335_JaffaCakes118
Size

1.9MB
MD5

c8c1f36f80f8b30cdee0d119cf442335
SHA1

bc3315718b5a2924f5f24fbe89b489547a914578
SHA256

03c1530a78692d1cafdc07e7cbec2bfd89242db39ad05d16310095bfa90f3f24
SHA512

1e95bd8ea0eecbd4fbc677de422cb90058706b523f528abb6fb23c2fb80cf659c84c717b4dd4dcbc01a6ace5a12268fa3f8ec5c00428cf6fd586e7f3d3b21cb8
SSDEEP

24576:/N1eYRtdlHBAj8aXomv7No21OcTQUNAOcMbTlsWMo152EDBx5YIOO1E:l1eIdlHBc8aXZJo2FQUNXcMbTd151Dbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8c1f36f80f8b30cdee0d119cf442335_JaffaCakes118

Files

c8c1f36f80f8b30cdee0d119cf442335_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0860a70dfb649b203b6cb926e9e8874f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
ReadFileEx
CreateTimerQueueTimer
WriteFileEx
DeleteTimerQueueEx
GetConsoleWindow

user32

GetWindow
GetNextDlgTabItem

authz

AuthzInitializeContextFromSid

Sections

.text
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 337KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ