cf00c2dfd38693837baaeb50af3e4fb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf00c2dfd38693837baaeb50af3e4fb8_JaffaCakes118
Size

115KB
MD5

cf00c2dfd38693837baaeb50af3e4fb8
SHA1

e8733101e3198f463c1da71ee7f8872d26fd111d
SHA256

3a076975e4b1f5fb0cd0544bbdd26eafc617b0181a47da03d7336698f8175d7d
SHA512

4ae82c44461b3f04d2f9e3c15bb29bd4fdc73204626f1be0ef4980033932b09be309796c8a7942781b97af4c8059ae34b6f358b03362b5d731464c72ce4cf7bb
SSDEEP

3072:GBISHxtrpIby05Q1c7Mnio0Lu4yS1Na1/e1GkOqtk:t8fiGmQyKiPK/eckOq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf00c2dfd38693837baaeb50af3e4fb8_JaffaCakes118

Files

cf00c2dfd38693837baaeb50af3e4fb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 77KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE