c8d5e7011a346b05b3d453b3de5fa960_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8d5e7011a346b05b3d453b3de5fa960_JaffaCakes118
Size

272KB
MD5

c8d5e7011a346b05b3d453b3de5fa960
SHA1

d79caf3c25a4c3437df8fa51c08d26f61337c2da
SHA256

47140d0ca74dd020b8979f078cf3829fb45fdbca140b4b9ba4b8384e540cb936
SHA512

09e4aacdacaf72080af54ef035d4c2cb3bcdc25804cbd992984c5b56e5d6a59614b7c88644335b40cd2ce290ea2d199f1bba68e3458c4214466d3d8dc9807035
SSDEEP

6144:MHfRiCaVCDtpCYy/SHiG7uQmP/6hMVWwQcUk:MHJVrpCY3HiK2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8d5e7011a346b05b3d453b3de5fa960_JaffaCakes118

Files

c8d5e7011a346b05b3d453b3de5fa960_JaffaCakes118
.exe windows:4 windows x86 arch:x86

304ff84e2debab1c0e7cc39d428a0039

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileMappingA
CreateThread
EnterCriticalSection
ExitThread
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalSize
SetEvent
SetLastError
Sleep
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

CharUpperBuffW
FindWindowA
TrackPopupMenuEx
wsprintfA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ