cf7df1b5e80abd13a93227716bcfb80a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf7df1b5e80abd13a93227716bcfb80a_JaffaCakes118
Size

6KB
MD5

cf7df1b5e80abd13a93227716bcfb80a
SHA1

ef4987e359a6769d1678ba813c3450fd7300d185
SHA256

7e89f2ed2bc5c4af72213441868720e218d8bfc9270ec271e537f0a687af10f8
SHA512

4d2bdc3f398223fa0c891a8c07a8d1f14e42b230f96dbb83c72fc726a824fc296cfa327fdbb150d10884fa2a1d2e2aac8ab13eb383661fcde5fceb7dcb7a37c0
SSDEEP

96:JBqohorvVEU1ee3krGwkb7SShfk6YN8cuEbcFiEcfnp3dEWGncz0W:JBq22vSGe3GwkbmjN8KbcFXYpmW5oW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7df1b5e80abd13a93227716bcfb80a_JaffaCakes118

Files

cf7df1b5e80abd13a93227716bcfb80a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ce3ace3165264683d03059bb90157f80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

exit

user32

WaitForInputIdle

ole32

CoInitialize

oleaut32

SysFreeString

Sections

.MPRESS1
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE